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Welcome  to  the  Control  Center  Technology  Conference. 

On  behalf  of  the  Control  Center  Technology  Conference  (CCTC)  steering  committee,  the  University  of 
Houston  - Clear  Lake,  and  an  outstanding  team  of  presenters,  I wish  to  thank  you  for  you  interest  in  the 
work  and  the  knowledge  that  the  participants  have  provided  to  the  NASA  and  aerospace  community.  We 
believe  that  you  will  find  that  these  proceedings  match  your  expectations  in  regard  to  timeliness,  quality, 
and  vision. 

The  CCTC’s  themes  encompass  architectures,  applications,  and  technologies.  Within  each  theme  area, 
each  session  has  been  selected  on  the  basis  of  the  relevance  of  the  speakers’  research  and  operations 
experience  to  the  overall  goals  for  the  national  space  program.  There  is  a balance  of  basic  and  applied 
research,  technology  transfer,  visionary  and  reality  based  planning,  and  the  'real  world'  of  operations  and 
lessons  learned.  In  total,  these  proceedings  should  prove  to  be  a guide  for  engineering  and 
management  planning  for  years. 

It  is  important  to  note  that  the  CCTC  is  a product  of  cooperation  among  government,  industry  and 
academic  institutions.  Quality  is  enhanced;  costs  are  reduced;  and  goals  are  attained  more  readily 
through  teamwork.  The  confluence  of  expertise  at  the  conference  is  but  one  example  of  success  of  the 
team  strategy.  The  NASA  leadership,  and  especially  the  efforts  of  Bob  Holkan,  deserve  commendation 
and  recognition  for  their  support  of  team  efforts  to  accomplish  the  complex  of  organizing  and  preparing 
such  a superb  conference. 

As  you  read  the  proceedings,  remember  that  your  ideas  are  important  to  the  speakers  whose  work  is 
presented  here.  If  you  have  ideas  that  can  contribute  to  the  infusion  of  new  technologies  into  mission 
control,  contact  us,  so  we  can  let  the  speakers  know  of  your  interest.  As  exemplified  by  the  welcoming 
letter  from  Mr.  Kranz,  Director,  Mission  Operations  Directorate,  NASA’s  commitment  is  to  maintaining  a 
dialog  for  the  exchange  of  techniques  and  information.  These  proceeding  add  to  the  dialog,  but  should 
be  but  a step  in  the  process.  Future  meetings  and  future  discussions  are  essential. 

Again,  thanks  for  your  interest  and  your  participation.  All  of  us  involved  in  the  conference  have  enjoyed 
working  with  you. 


' Dr.  Glenn  B.  Fregclman,  Director 
' Software  Engineering  Professional  Education  Center 
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Space  Administration 
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77058 


NASA 


To  All  Conference  Attendees: 


The  Mission  Operations  Directorate  has  an  aggressive  plan  for 
infusing  new  technology  into  the  Mission  Control  Center 
(Shuttle  Operations),  while  at  the  same  time  efforts  to  develop 
a Space  Station  Control  Center  have  moved  into  early 
implementation  phases.  To  achieve  success,  a great  deal  of 
work  involving  many  key  decisions  will  be  accomplished  over  the 
next  several  years. 


To  assure  success  in  these  control  center  projects  as  they 
evolve  over  the  next  decade,  it  is  appropriate  to  establish  an 
ongoing  dialog  with  other  personnel  engaged  in  similar 
endeavors.  The  time  is  right  for  the  sharing  of  ideas,  lessons 
learned,  and  for  establishing  visions  for  the  future. 


The  Johnson  Space  Center  and  the  University  of  Houston  - Clear 
Lake  are  jointly  sponsoring  an  Aerospace  Control  Center 
Technical  Conference  from  June  18-20,  1991.  This  conference 
will  provide  a broad  range  of  information  on  aerospace  control 
center  efforts  in  progress  across  Government  and  industry. 


It  is  my  desire  that  this  conference  provide  the  opportunity 
for  the  exchange  of  information,  the  establishment  of  contacts, 
and  that  it  may  lead  to  an  ongoing  effort  to  share  information 
and  techniques  across  the  Agency  and  Industry.  I hope  that  you 
will  consider  helping  to  make  this  conference  a success  through 
your  active  participation. 
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Eugehe  F . H<ranz  ^ 

Director,  Mission  Operation^ 


ii 


Contents 


B-2  and  Other  Military  Flight  Test  Control  Center  Current  Technologies  1 

JPL's Space  Flight  Operations  Center  Development  Project  Overview  33 

Kennedy  Space  Center  Launch  Processing  System  (LPS)  and 

the  Test  Checkout  and  Monitoring  System  2 (TCMS  2)  53 

NASA  Ames-Dryden  Integrated  Test  Facility  83 

Conviction. ..Why  We  Are  In  Space  107 

Space  Shuttle  Mission  Control  Center  Upgrade  (MCCU)  125 

Space  Station  Control  Center  (SSCC)  209 

Air  Force  Satellite  Control  Network  237 

Rockwell  Downey  Mission  Support  Room  (MSR)  and  Data  Display  & 

Review  (DDR)  Room  Upgrade  281 

Real  Time  Data  Systems  (RTDS)  303 

SHARP  - Spacecraft  Health  Automated  Reasoning  Prototype- 

Real  Time  Expert  Systems  337 

Planning  Systems  at  Pioneer  Mission  Control  363 

Automation  for  Deep  Space  Vehicle  Monitoring  381 

Control  Center  Operations  at  the  Goddard  Space  Flight  Center  401 

Huntsville  Operations  Support  Center  423 

Real  Time  Data  System  Application  443 

Solar  Mesosphere  Explorer  Control  Center  and  OASIS  467 

MacSPOC-Orbital  Trajectory  Calculations  on  a Laptop  Computer  493 

Advanced  Technologies  for  Mission  Control  Centers  505 

Advanced  Laptop  and  Small  Personal  Computer  Technology  549 

MOD  Control  Center  Automated  Information  Systems  Security  Evolution  589 

Mission  Critical  Technology  Development  615 

Future  Applications  of  Artificial  Intelligence  to  Mission  Control  Centers  635 

iii 


Sr'Y 

N9  2" 12011 


O 

o 


1 


Jerry  Hill 

Network  Systems  Division 
Realtime  Data  Systems  Center 

18  June  1991  Lompoc,  California 


Computer  Sciences  Corporation  i 1 Realtime  Data  Systems  Center 

KEY  POINTS  / THEME  I 1 


LU 

O 

cc 

o 

CO 

LL 

O 


CO 


LU 

Q 

Z 

LU 

0. 

LU 

Q 


O 

Z 

CO 

0) 

LU 

O 

o 

cc 

Q. 

>- 

CC 

h 

LU 

s 

LU 

LU 

I- 


LU 

s 

g 

cc 

LU 

z 

LU 

0 


£ 

E3 

z 

LU 

O 

O 

s 

o 

X 

LU 

s 

I- 


0 
w 
< 

1 


CO 

DC 

o 

5 


o < 

S O 

co  I- 

CO  QJ 
LU  Tj 

o 
o 
cc 

CL 

O 
LU 
H 
3 

eg 
E 

co 

Q 


LU 

s 

5 

2 

CC 


^ 2 
< 
Cl 

LL 

o 


< 

< 

O 


< 

o 

LU 

CC 


g 

X 

LU 

N 

LU 

LU 

X 

LL 

O 


■ 

u 

a 


& 

LU 

O 

z 

o 

o 

< 

LU 


<D 

^ E 

I J 


o 

> 

c 


c 
o 

o 

8 1 

O O 


3 


TEST  SUPPORT  FACILITY 
MISSION  CONTROL  ROOM 

The  Test  Support  Facility  (TSF)  is  comprised  of  three  (soon  to  be 
four)  control  rooms.  Each  control  room  contains: 

1.  Two  Large  Screen  Displays. 

2.  Ten  high  resolution,  rasterized,  color  displays  with  up 
to  1000  user-defined  displays. 

3.  Three  alphanumeric  terminals. 

4.  128  stripchart  pens. 

The  TSF  provides  the  following  processing  capabilities: 

1.  Process  two,  1,2  Mb/Sec  telemetry  sources. 

2.  Engineering  Unit  (EU)  conversion  of  156K  samples  per 
second. 

3.  FM  processing  of  72  channels  with  aggregate  rate  of  300 
K samples  per  second. 

4.  Maximimum  number  of  measurements  defineable  is  10,000. 

5.  Record  300K  samples  per  second  with  aggregate  on-line 
archival  of  up  to  3 Terabytes  for  3 control  rooms  (one 
year's  data). 
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TSF  CONFIGURATION 


The  TSF  architecture  is  made  up  of  the  following  subsystems  and 
components . 

Flight  Monitoring  System  f FMS)  - Each  of  three  FMSs  supports  a 
Mission  Control  Room.  An  FMS  consists  of  three  mini-computers 
providing  a combined  processing  capacity  of  approximately  20  MIPS. 
There  is  one  processor  assigned  to  each  of  three  functions: 
Acquisition,  History  Recording  and  Display.  A telemetry  front  end 
provides  bit  and  frame  synchronization,  decommutation  and  EU 
conversion  prior  to  receipt  by  the  mini-computers.  Additionally, 
the  front  end  drives  128  stripchart  recorders. 

1.  Acquisition  ingests  telemetry  data  from  72  FM  channels 
with  and  agregate  rate  of  300Ksps  and  from  two  1.2Mb  PCM 
streams.  Processing  provides  EU  conversion,  time  tagging 
for  time-homogeneous  data  and  stripchart  recording.  Fast 
Fourier  Transforms  and  other  compute-intensive  processing 
are  supported  by  an  array  processor  coupled  to  the 
acquisition  processor.  All  bit  sync,  frame  sync  and 
decommutation  are  performed  in  the  special  purpose 
telemetry  front  end. 

2.  Realtime  display  provides  display  processing  for  10  color 
graphics  terminals,  three  alphanumeric  terminals  and  two 
large  screen  displays. 

3.  History  recording  is  performed  for  all  telemetry  data 
received.  This  includes  300Ksps  raw  or  156Ksps  EU 
converted  data.  Recorded  data  may  be  "recalled"  from  the 
history  recording  subsystem  in  realtime. 

Flight  Monitoring  System  (FMS)  Common  Functions  - Several  functions 
are  shared  by  all  control  rooms  via  a high  speed  network 
communications  link.  These  functions  are  described  below: 

An  on-line,  mass  storage,  archival  system  is  available  to  all 
control  rooms.  This  Storage  Archival  System  (SAS)  provides  three 
trillion  bytes  (3  terabytes)  of  archived  storage  from  which  files 
of  up  to  123MB  can  be  accessed  within  90  seconds. 

A pool  of  Engineering  Workstations  (FMSs)  is  available  to  all 
control  rooms.  The  primary  function  of  these  workstations  is  to 
provide  telemetry  processing  and  display  definitions  for  the  three 
Flight  Monitoring  Systems. 

Time  Space  Position  Information  (TSPI)  is  provided  for  all  FMSs 
from  the  TSPI  processors  over  the  network  communications  link. 
This  information  is  used  to  direct  intercepts,  bomb  drops  and  other 
operations  requiring  exact  vehicle  position  and  track  prediction 
information. 
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B-2  EVOLUTION 

A fourth  Flight  Monitoring  System  (FMS)  is  being  added  to  the 
existing  three  FMSs  in  the  TSF.  This  upgrade  will  be  functionally 
transparent  to  the  operation  and  consist  of  the  following 
replacements : 

1.  Two  of  the  three  FMS  mini  computers  replaced  with  a 
single,  more  powerful  mini. 

2.  Ten  graphics  terminals  replaced  with  workstations. 

3.  Three  terabyte  Storage  Archival  System  replaced  with  a 
6 terabyte  system. 

Intelligence  for  processing  operator  commands  from  the  current 
graphics  terminals  resides  in  the  minis.  This  processing  will  be 
perforated  in  the  workstation  with  the  workstation  retaining  all 
graphics  display  functionality  previously  exhibited  by  the  existing 
display  stations.  This  will  be  done  while  not  modifying  existing 
software.  The  goal  is  to  only  add  more  hardware  and  software, 
providing  for  a single  system  from  a maintenance  perspective. 

A Yourdon  analysis  was  performed  using  a CASE  tool  to  insure  all 
interfaces  were  thoroughly  understood  and  documented  before  the 
upgrade  was  attempted. 
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RTPS  III  CAPABILITIES 

The  Realtime  Processing  System  (third  generation)  upgrades  the 
current  flight  test  capability  to  state-of-the-art  systems.  RTPS 
III  consists  a Control  Center,  made  up  of  six  control  rooms,  and 
is  expandable  to  at  least  eight.  Each  Control  Center  has  the 
following  capabilities: 

1.  Process  as  many  as  four  10Mb  PCM  sources. 

2.  Process  as  many  as  64  FM  channels  with  an  aggregate 
throughput  of  200Ksps. 

3.  Perform  EU  conversion  at  200Ksps. 

4.  Record  EU  data  in  frame  format  and  order  at  160Ksps. 

5.  Define  2K  telemetry  measurements. 

6.  Time  homogeneous  CVT  and  recording  buffers. 

7.  Recall  of  recorded  data  for  display  during  realtime. 

8.  No-freeze  hardcopy  of  graphics  and  alphanumeric  displays. 
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RTPS  III  BLOCK  DIAGRAM 
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CONTROL  CENTER  ARCHITECTURE 

Each  of  six  control  rooms  consists  of  a triad  of  mini-computers 
wxth  a connecting  shared  memory  system.  Each  CPU  in  the  triad 
represents  a subsystem  performing  a major  system  function.  The  six 
control  rooms  share  a common  file  management  system,  accessible 
over  a high-speed  network. 

Pfta — Channel — Subsystem  — The  Data  Channel  Subsystem  provides  for 
bit  sync.,  frame  sync.,  decommutation  and  time  tagging,  EU 
conversion  and  recording,  limit  checking,  stripchart  recording  and 
data  distribution.  This  subsystem  consists  of  a special  purpose 
front  end  working  in  tandem  with,  and  driven  by,  one  of  three  mini- 
computers. CVT  data  are  provided  to  shared  memory  by  the  CPU  and 
via  DMA  from  the  front  end.  Note  that  all  bit  sync,  frame  sync  and 
decommutation  are  performed  in  the  special  purpose  telemetry  front 
end. 


Display  Host  Processor  - The  Display  Host  Processor  drives  the 
control  center  displays  from  the  CVT  data  provided  by  the  Data 
Channel  Subsystem.  These  data  are  also  recorded  in  a circular  mass 
storage  file  from  whence  they  may  be  recalled  and  displayed  on 
either  of  the  two  graphics  displays  during  realtime.  Control  and 
display  devices  provided  by  this  subsystem  are: 

1.  Two  monochrome  graphics  (vector  refresh)  terminals. 

2.  Two  Critical  Measurement  Displays  (12  selectable 
measurements  each  LED  panel) . 

3.  Two  fixed-function  keyboards  (64,  one-keystroke 
functions) . 

4.  Two  limits  displays  (color). 

5.  Two  tabular  displays  with  graphics  capability  (color). 

6.  Two  lazer  hardcopy  devices  for  vector  refresh  terminals. 

7.  Two  color  hardcopy  devices  for  color  graphics  terminals. 

8.  128  stripchart  channels  (driven  from  Data  Channel 
Subsystem  processing) . 

Application  Subsystem  - The  Application  Subsystem  consists  of  a 10 
MIP  mini-computer  and  associated  array  processor.  This  subsystem 
provides  user-defined,  compute-intensive  processing.  Data  are 
provided  by  the  Display  Host  Porcessor  and  Data  Channel  Subsystem 
through  the  shared  memory  interface.  Processed  data  and  derived 
measurements  are  returned  to  those  two  subsystems  from  the 
Applications  Subsystem  through  the  same  interface. 
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File  system  Processor  - The  File  System  Processor  Subsystem 
provides  operation  definition  for  all  operations  conducted  from  any 
control  room.  Telemetry  formats  and  processing  are  described  by 
the  Telemetry  Engineer.  Files  are  generated  for  distribution,  on 
the  high-speed  network,  to  the  applicable  control  room  processors 
for  control  of  all  processing  and  display  directives  associated 
with  a specific  operation. 


Cost:  The  capabilities  described  above  were  provided  for  an 
average  cost  of  $3.3M  control  room,  including  the  File  System  anc. 
high-speed  network. 


13 


TELEMETRY  PROCESSING  SYSTEM 
CAPABILITIES 

The  Telemetry  Processing  System  (TPS)  was  22  months  in  development 
and  is  currently  undergoing  factory  acceptance  testing  in  Lompoc, 
California.  Installation  at  the  Pacific  Missile  Test  Center  at  Pt. 
Mugu  is  scheduled  for  August,  1991.  The  TPS  consists  of  four 
processing  subsystems  (TPSS)  that  are  switchable  between  four 
control  rooms.  TPS  capabilities  for  each  control  room  are  as 
follows: 


1.  Process  up  to  eight  telemetry  input  sources  including: 

a.  Four  10Mb  PCM  links. 

b.  FM  (20  channels,  aggregate  of  300Ksps) . 

c.  Two  PAM  links. 

2.  Perform  EU  conversion  at  400Ksps  (Mix  = 80%  Ax  + b,  10% 
5th  Order  Polynomial  and  10%  Table  Lookup. 

3.  Recording  of  360Ksps  EU  converted  measurements. 

4.  Define  up  to  16K  measurements. 

Playback  of  digital  data  from  mass  storage. 

6.  Recall  of  recorded  data  in  realtime. 
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TPS  ARCHITECTURE 


The  TPS  architecture  consists  of  four  contrpl  rooms  supported  -.y 
four  processing  subsystems.  Processing  subsystems  are  switchabie 
between  control  rooms.  The  special  purpose  telemetry  front  end  is 
interfaced  to  the  host  through  a proprietary  high-speed  data 
interface.  CVT  data  are  provided  to  all  workstations  over  a).' 
Ethernet  interface.  Data  are  provided  to  the  Range  Central  Site. 
Computers  over  a high-speed  (100Mbps)  network.  Workstations  in  a 
control  room  can  receive  data  from  any  two  processing  subsystems 
simultaneously.  Data  from  any  of  the  processing  systems  can  be 
provided  to  all  four  of  the  control  rooms  simultaneously. 
Stripcharts  in  the  control  rooms  are  driven  directly  from  the. 
special  purpose  telemetry  front  end.  All  bit  sync,  frame  sync  ane 
decommutation  functions  are  performed  by  the  special  purpose 
telemetry  front  end.  The  specific  subsystems  are  as  follows: 


Telemetrv  Front  End  Subsystem  - The  TFESS  performs  bit  sync. , fram 
sync.,  decommutation,  ID  and  time  tagging,  EU  conversion, 
stripchart  processing.  Data  are  provided  to  the  Telemetry 
Processing  Subsystem  (TPSS)  and  Telemetry  Display  Subsystem  (TDSS, 
over  the  Intelligent  Data  Interface  (IDI) /Universal  Memory  Network 
(UMN)  high-speed  data  network. 


Telemetrv  Processing  Subsystem  - The  TPSS  controls  the  TFESS,  ana 
provides  processed  data  to  the  TDSS  workstations.  The  interface 
to  the  TDSS  is  Ethernet.  Data  are  transmitted  to  and  received  from 
the  Range  Central  Site  Computers  over  the  Telemetry  Data  NetwoiK 
(a  100Mb  link) . A second  Ethernet  link  provides  communication  with 
the  Software  Development  Station  and  the  Telemetry  Decommutation 
and  Processing  System, 


Telemetrv  nisDlav  Subsystem  - The  TDSS  receives  data  from  the  TPSS 
over  Ethernet  and  from  the  TFESS  through  the  UMN  interface.  Data 
are  displayed  on  four  19"  color  graphics  workstation  monitors. 
Every  workstation  has  access  to  all  measurements  in  given  subse 
as  defined  in  a database  distributed  prior  to  the  operation.  Da,  i 
may  be  recorded  to  the  local  workstation  disk  and  recalled  i-1 2 3 4 
realtime.  A TDSS  consists  of: 

1.  Four  workstations  with  19"  color  graphics  monitor  and 
local  mass  storage. 

2.  One  color  hardcopy  device  shared  by  four  workstations. 

3.  Four  monochrome  hardcopy  devices  (one  per  workstation). 


4.  64  stripchart  pens. 

Software  np.vel  opment  Station  - The  SDS  provides  a system  for 
software  development  and  for  creation  of  operation  definition 
files.  Files  defining  an  operation  are  built  by  Telemetry  and 
Project  Engineers  at  either  the  SDS  or  the  TPSS  and  distributed  to 
the  appropriate  subsystems  during  operation  initialization.  These 
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files  define  display  formats,  EU  conversion  parameters,  stripchart 
channel  assignments  and  telemetry  channels  to  be  processed,  as  well 
as  providing  assignment  of  telemetry  IDs  to  workstations. 
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TELEMETRY 
DECOMMUTATION 
AND  PROCESSING 


Computer  Sciences  Corporation 
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TPS  OPERATIONS  CONTROL  ROOM 
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TPS  PERFORMANCE  SUMMARY 
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RDSC  TELEMETRY 
SYSTEM  CAPABILITIES 
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SPECIAL  PROCESSING 


CSC  DEVELOPMENT  PRINCIPLES 


esc 1 s approach  to  designing  and  implementing  systems  may  be  defined 
in  three  words:  involvement,  process  and  automation. 


Tnvol vement  implies  a team  made  up  of  representatives  of  all 
parties  concerned  with  the  success  of  the  system.  It  is  an 
"egoless"  team  not  concerned  with  who  receives  credit  for  success. 
Client,  integrator,  users  and  other  contractors  are  all  involved 
in  defining  requirements,  goals  and  user  products  and  interfaces. 
The  desired  products  and  external  interfaces  are  defined  and 
documented  along  with  goals  before  requirements  are  written.  This 
is  done  rapidly  with  the  knowledge  that  the  result  will  be 
maintained  as  a working  document  that  will  reach  maturity  only  when 
the  system  is  complete.  This  "user"  document (s)  provides  an 
informed  basis  for  defining  requirements.  When  the  team  agrees 
that  the  requirements  are  as  complete  as  can  be  reasonably 
expected,  the  design  phase  begins.  Just  as  the  contractors  and 
users  were  involved  in  the  requirements  analysis  and  definition 
phase,  so  is  the  client  involved  in  the  design  phase.  It  is 
equally  important  to  keep  engineers,  programmers  and  support  staff 
involved.  This  is  done  by  keeping  them  informed  on  the  progress 
of  the  project  and  listening  to  their  ideas  on  possible 
improvements  to  the  development  process;  management  has  no  monopoly 
on  good  ideas.  Keeping  all  parties  involved  engenders  enthusiasm 
for  and  helps  insure  success  of  the  project. 


Process  determines  the  manner  in  which  the  development  is  managed. 
The  process  is  defined  by  a methodology  which  is  tailored  to  the 
specific  application.  It  takes  full  advantage  of  Commercial  Off- 
The-Shelf  (COTS)  hardware  and  software  and  encourages  the  use  of 
software  that  can  be  transported  between  systems.  The  methodology 
provides  for  design,  code  and  test  standards.  It  provides  a 

means  of  defining  the  system  functions  as  detailed  by  the 
requirements  specification  and  for  assigning  requirements  to  system 
and  subsystem  components  down  to  the  software  module  or  hardware 
component  level.  The  methodology  provides  for  the  mapping  of 
requirements  to  the  lowest  level  system  components  and  for 
meticulously  defining  interfaces  at  all  levels  of  system  design. 
The  methodology  provides  for  breaking  a large  complex  problem  into 
smaller  logical  pieces  that  can  be  recognized  as  something  that  the 
implementor  has  done  before.  The  more  experience  the  ''team"  has 
in  a particular  discipline,  the  earlier  in  the  decomposition  this 
recognition  occurs  and  the  lower  is  the  development  cost. 


The  facility  must  always  be  considered  in  the  total  process.  CSC 
develops  a Site  Preparation  Requirements  Equipment  Installation 
Plan  (SPREIP)  for  every  project.  Power  supplies,  facility  layout, 
exact  cable  distances,  air  conditioning  and  other  related  items  are 
analyzed  and  fed  into  the  total  development  process  m order  to 
influence  design  as  necessary  and  eliminate  any  surprises  when 
correction  may  prove  very  costly.  This  falls  in  line  with  CSC  s 
general  development  philosophy  of  identifying  interface  problems 
as  early  in  the  development  phase  as  possible.  Correction  of 
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interface  problems  late  in  the  development  phase  or  in  the  test 
phase  has  been  responsible  for  large  cost  overruns  on  many 
projects. 

Automation  refers  to  the  application  of  "tools"  to  the  analysis, 
design  and  development  processes.  A universally  recognized  tool 
is  Computer  Aided  Design  (CAD)  with  automatic  placement  and  signal 
routing  for  PC  components.  Tools  supporting  programmers,  such  as 
debugging  aids,  dynamic  and  static  performance  analysis  packages, 
source  code  maintenance  and  text  editors  are  readily  available. 
CSC  uses  these  tools  to  the  maximum  extent  possible  and  constantly 
polls  the  industry  for  the  latest  development  tools.  Configuration 
management  tools  have  been  developed  by  CSC.  CSC  uses  both  their 
own  configuration  management  tools  and  those  provided  by  the 
vendors . 

Computer  Aided  Software  Engineering  (CASE)  tools  are  available,  but 
not  as  universally  accepted  throughout  the  industry  as  tools  such 
as  CAD  and  software  debuggers.  CSC  has  been  using  CASE  tools 
successfully  for  several  years.  CASE  not  only  provides  automation 
for  the  design  phase,  but  it  integrates  design  and  documentation 
into  a single  process,  something  that  is  not  possible  without 
automation.  The  problem  some  developers  have  with  CASE  is  that 
they  expect  the  tool  to  perform  the  process  for  them.  Before  CASE 
can  be  successfully  applied,  the  methodology  associated  with  the 
particular  CASE  tool  must  be  thoroughly  understood.  CASE  can  be 
applied  most  profitably  if  it  is  networked,  giving  all  developers 
access  to  the  process  narratives  and  logic  diagrams  (i.e.,  data 
flows,  structure  charts,  etc.).  It  is  also  important  that  the  CASE 
tool  provide  the  user  with  an  acceptable  word  processing  capability 
and  data  dictionary.  Not  all  CASE  tools  contain  these 
capabilities.  CSC  understands  the  misgivings  voiced  by  some 
developers  using  CASE,  but  believes  that  these  misgivings  are 
rarely  the  fault  of  the  CASE  tool,  but  rather  the  developer's 
unrealistic  expectations.  CSC  will  continue  to  use  CASE  and  other 
design  and  development  tools  and  participate  in  their  expanded  use 
in  the  industry. 

Automation  is  also  used  in  performance  monitoring  and  tracking 
estimated  vs.  actual  progress  in  terms  of  measurable  schedule  and 
cost  variances.  CSC  project  managers  use  tools  such  as  Super 
Project,  Timeline  and  Lotus  to  provide  objective  monitoring  of  a 
project's  progress.  Which  tool  is  used  is  dependent  upon  the  needs 
of  the  project  and  the  specific  project  manager's  personal 
experience  with  a particular  tool.  The  importance  of  these  tools 
cannot  be  overestimated  for  the  insight  they  give  managers  in 
developing  and  modifying  plans  to  achieve  the  original  project 
goals. 
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estimated  vs.  actual  progress  in  terms  of  measurable  schedule  and 
cost  variances.  CSC  project  managers  use  tools  such  as  Super 
Project,  Timeline  and  Lotus  to  provide  objective  monitoring  of  a 
project's  progress.  Which  tool  is  used  is  dependent  upon  the  needs 
of  the  project  and  the  specific  project  manager's  personal 
experience  with  a particular  tool.  The  importance  of  these  tools 
cannot  be  overestimated  for  the  insight  they  give  managers  in 
developing  and  modifying  plans  to  achieve  the  original  project 
goals. 


27 
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MANAGEMENT  PHILOSOPHY 
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Computer  Sciences  Corporation  Realtime  Data  Systems  Center 
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LPS  Milestones 

Conception  thru  Operation 
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Semi-Demand  Mode  of  Operation 
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Dynamic  Buffer  Map 


65 


£ 

o 

cd 

o 

ft 

ft 

'd 

CD 

N 

•M 


cd 


a> 

o 


+3 

PI 


+3 

ti 


0)  o 

S 6 

Ph  o 
O bD 

rj*  cd 

> g 

Q © 

■a  2 


© 

•Hi 

co 

cd 

w 


u 

© 

•H 

co 

cd 

w 


<D 

-p 

3 

pQ 

•rH 

-p 

GO 


£ 

o 

o 

Ph 

Ph 

< 


4^> 


•pH 

A 

a 

'd 

P 

as 

PH 

M 

W 


67 


■ Modularity 

■ Reliability 
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/ Vendor  independent 


/ Isolate  common  functions 
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Low  Latency  Data  Reads 
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Weak  Simulation  Support 
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/ Development  8c  Ops  don't  mix 
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NASA  Dryden  Integrated  Test  Facility  (ITF) 
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Now  and  the  Future 

Military  and  Civil  Aircraft 


Capability  Concept 

Fully  Integrated  Testing  of  the 
Aircraft  Performed  Within  the  Facility 
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Pilot  inputs 
Avionics  commands 
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- Use  a target  project  (F-18  HARV)  to  focus  developments 

- Combine  developers  and  users  on  one  team 

- Provide  generic  capability  for  multiple  projects 
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Major  ITF  Capabilities 
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ITF  System  Architecture 
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• C,  Unix,  X-Windows 

- High  performance  workstations 

- Generic  to  support  multiple  projects 
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Designed  with  automation  in  mind. 
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Open  Systems  Architecture 

- Sun,  Encore,  Silicon  Graphics,  IBM, 
Concurrent 


Overview  of  Test  Operations 
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XLRC  Description 

CAST  Local  Recording  Capability  Utility 
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XMon  Description 

CAST  Data  Monitoring  Utility 
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Display  change  in  less  than  1 second 


XPIot  Description 

CAST  Data  Plotting  Utility 
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Archives  network  files  • Automate  all  CAST  tools 

(compressed,  encrypted,  etc..) 


103 


104 


Interface  of  generic  system  requires  ~ 1/2  workyear. 
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Our  estimate:  Overall  test  time  reduced  bv  a factor  of  3 


Control  Center  Technology 

Conference 


Luncheon  Speaker 


Eugene  F.  Kranz 
Director, 

Mission  Operations, 
NASA/Johnson  Space  Center 
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CONTROL  CENTER  TECHNOLOGY  CONFERENCE 
University  of  Houston  - Clear  Lake 
June  18, 1991 

"Conviction  . . .Why  we  are  in  Space" 

Pleasure  to  talk  to  you  today 

- When  I accepted  this  invitation,  I intended  to 
discuss  my  thoughts  on  my  beliefs  on  the  elements 
and  characteristics  of  a control  center  - to  discuss 
the  principals  of  command  and  control. 

- This  would  have  been  an  easy  topic  - for  I have  been 
involved  with  command  and  control  all  my  life 

- Starting  as  a forward  air  controller/and  as  a 
fighter  bomber  pilot  supporting  the  7th 
Infantry  Division  in  Korea 

- To  the  Range  Control  Center  (King-1)  at 
Holloman  Air  Force  Base  where  we  conducted 
flight  test  of  a broad  variety  of  B-52  missile 
flight  tests 


- To  Mercury  Control  Center  at  Cape  Canaveral 


- To  the  evolution  of  the  current  MCC  from 
Gemini  to  the  present 


Page  2 
6/18/91 


- Instead  I chose  a different  topic  - it  is  a topic  borne 
of  frustration 

- it  is  a topic  that  was  debated  on  the  House  Floor  p^w^V— 
"fvO-O  jtwo  weeks  ago 

- It  is  the  topic  that  we  are  grappling  with  in  the  JSC 
Center  Retreat 

Preparing  for  the  debate  on  the  House  Floor, 

Congressman  Bill  Andrews  told  us  at  JSc/i  weeks  ago, 

"You  do  a great  job  on  the  technical  details,  you  are 
poor  salesmen  and  you  hate  to  get  your  hands  dirty  in 
politics."  Above  all,  "You  must  speak  with  one  voice 
(Space  Station)  and  you  must  have  convictions." 

Conviction  - 

- Strongly  held  faith  or  belief  that  leads  to  a 
compulsion  to  act  based  upon  that  belief 

My  conviction  on  space  began  on  October  4, 1957  - 
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- My  squadron  was  stationed  on  Formosa  to  support 
the  Nationalist  Chinese 

- The  Sputnik  launch  inspired  fear  - apprehension  - 
the  unknown. 

- You  could  see  it  on  the  faces  of  the  people  of 
Asia. 

Those  people  who  relied  on  American 
technology  for  their  independence. 

I did  not  understand  what  had  happened  or  where  the 
Sputnik  event  would  lead  us  - all  I know  was  that  this 
Soviet  space  flight  - like  the  first  "Wright  Brothers 
Flight"  - would  forever  change  the  world,  and  our 
relations  with  the  community  of  men.  History  was 
written  that  day. 

I have  come  to  believe  that  space  flight  is  the 
instrument  by  which  we  will  assure  that  which  we 
cherish  most . . . but  least  understand,  and  value  until  it 
is  lost . . . that  is  our  Independence! 

I speak  of  Independence  in  a national,  personal,  and 
economic  sense  . . . independence  which  we  must  pass 
to  all  generations  - the  exemption  from  arbitrary 
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restrictions  on  civil,  political  or  religious  liberties  - to  act 
based  upon  conviction  ...  to  be  able  to  move  in  the 
best  interests  of  our  people. 

I also  believe  space  flight  is  the  instrument  of 
leadership,  of  belief,  of  our  destiny . . . which  inspires 
America  to  take  the  risks,  to  make  the  commitment,  to 
preserve  the  ideals  which  compel  Americans  to  be  the 
leaders,  to  be  the  best. 

Independence  and  leadership  is  best  exemplified  in  the 
events  now  occurring  throughout  Europe  in  those 
countries  which  were  once  Soviet  Bloc  and  on  the 
Chinese  mainland. 

These  countries  no  longer  wish  to  be  subordinate  to 
political,  intellectual,  economic  or  technical  beliefs 
which  suppress  independence.. 

In  China  in  the  Summer  of  1989. 

We  saw  a courageous  young  man  bring  a tank  column 
to  a halt ...  we  saw  the  Goddess  of  Freedom  raised  by 
the  students . . . and  subsequently  crushed  by  the 
Chinese  Army.  In  1991,  the  Baltic  States  now  rivet  our 
attention  ....  The  issue  is  Independence. 


Ill 
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Independence/Freedom  is  a precious  right  we 
Americans  long  have  cherished.  Throughout  our 
history,  we  have  been  able  to  choose,  to  speak  our 
minds, . . . able  to  go  as  high  and  as  far  as  our  talents, 
energies  and  ambitions  would  take  us.  We  are  able  to 
worship  ...  to  compete  . . . even  to  criticize  our 
government.  Independence  is  our  heritage. 

Independence  has  made  the  United  States  the  hope  and 
the  envy  of  the  world.  It  has  allowed  us  to  make  the 
choices,  select  the  directions,  and  become  the  leader  of 
the  world  politically,  economically,  technically,  and 
morally. 

Freedom  and  leadership  are  closely  coupled.  We  know, 
however,  that  leadership  is  not  ours  by  right.  We 
became  a leader  of  nations  by  the  energies  of  our 
explorers,  the  dedication  of  patriots,  the  inventions  of 
our  peoples  and  the  basic  enthusiasms  of  our  young 
Republic.  We  grew,  became  a role  model  for  nations 
and  an  eloquent  example  of  Freedom  for  two  centuries. 
Today  we  find  ourselves  in  the  position  of  leader  of  the 
entire  world. 

Leadership,  however,  does  not  come  free.  In  recent 
years,  we  have  been  challenged  in  many  ways 
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throughout  the  world  . . . just  as  we  worked  hard  to 
attain  it ...  we  must  continue  to  work  hard  to  keep  it. 

Other  nations  now  challenge  us  in  basic  industry, 
manufacturing,  economics,  and  high  technology.  To 
some  extent  they  also  challenge  our  basic  character  as  a 
people  ...  our  ability  as  a people  to  risk,  to  work  hard  . . 
. to  sacrifice.  We  are  certainly  challenged  in  the 
education  of  our  young  people  by  all  the  nations  of  the 
free  world. 

During  the  period  after  the  Challenger  disaster,  there 
were  times  when  I frankly  wondered  if  we  were  about 
to  surrender  our  leadership  in  space,  to  the  Soviets, 
Chinese,  and  the  free  nations  of  Europe. 

More  recently  in  the  debates  on  the  House  Floor,  I saw 
many  people  - about  40  percent,  who  did  not 
understand  the  sacrifices  which  are  necessary  if  we  are 
to  compete  in  today's  world  ofrtechnology.  We  came 
close  to  surrendering  the  Floor  vote  on  Space  Station 
on  Thursday,  June  the  6th. 

Three  impressions  emerged  from  the  discussions: 

First:  There  was  a general  lack  of  recognition  that 
space  and  space  technology,  are  dominant  contributors 


113 


Page  7 
6/18/91 


to  the  health  and  well  being  of  the  United  States 
economy.  Few  knew  that  aerospace  technology  alone 
produces  a $17  billion  annual  trade  surplus,  or  that  it  is 
virtually  the  only  high  technology  category  where  we 
enjoy  a surplus.  M*-  70%— 

Second:  People  seemed  unwilling  to  accept  the 
concept  that  risk  was  essential  to  human  progress,  and 
in  particular  was  a continuing  element  of  our  ability  to 
remain  a great  Nation. 

Third:  There  were  basic  questions  on  whether  we 
should  even  be  in  space,  but  beyond  that ...  a basic  and 
underlying  feeling  that  we  were  moving  too  fast, 
stretching  too  far,  and  what  we  were  doing  was  not 
pertinent. 

A nation  must  aspire  to  be  great.  These  aspirations 
provide  the  vision,  which  raise  our  sights  which  cause 
great  things  to  happen.  These  aspirations  provide  a 
common  inspiration  for  a better  world.  The  words  of 
Neil  Armstrong  "...  For  All  Mankind"  signify  the 
aspirations  we  must  have  in  our  work. 

There  was  much  debate  on  the  House  Floor  on  whether 
science  would  suffer  because  of  the  Space  Station 
funding. 
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To  those  who  complain  that  NASA  puts  science  on  the 
back  burner.  I'd  say . . . "Where  have  you  been?" 

The  5 years  from  1989  - 1994  will  be  the  most 
productive  for  space  science  and  discovery  in  the 
history  of  the  United  States.  The  missions  which 
started  with  the  Magellan  launch  to  Venus  in  May  of 
1989,  followed  by  Galileo  and  Ulysses  are  part  of  a 
series  of  launches  of  35  major  scientific  spacecrafts  in 
the  immediate  timeframe. 

These  are  not  small  satellites  like  we  launched  in  the 
glory  days  of  the  1 960's.  These  are  major  facility  class 
missions  . . . telescopes,  like  the  Hubble,  Astro,  and 
Gamma  Ray  Observatory  and  the  Spacelab  laboratory 
missions,  like  the  recent  Life  Science  mission  to  study, 
understand  and  innovate,  and  to  teach. 

We  will  be  awash  in  new  science  data, . . . we  will  apply 
new  knowledge  to  our  problems  on  Earth  . . . our  world 
leadership  in  space  science  will  be  unquestioned  if  we 
have  the  will  to  continue. 

With  these  discoveries  will  come  understanding, 
knowledge  and  the  return  to  the  human  spirit  that 
comes  from  doing  tough  things  well. 
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It  will  also  provide  an  economic  return.  The  best 
estimates  made  indicate  that  $7  of  economic  activity  is 
returned  for  each  dollar  spent  on  aerospace  . . . the 
strength  of  our  economy  to  produce  is  the  key  to  our 
ability  to  improve  the  life  of  all  Americans  . . . and  the 
world. 

When  Boris  Yelsin  visited  JSC  in  September  1989,  he 
cited  an  even  higher  dividend.  He  told  the  JSC  Center 
Director,  Aaron  Cohen,  that  Soviet  cosmonauts  had 
urged  him  to  visit  the  space  center,  because  they 
believed  his  outspoken  criticism  of  their  program  might 
be  tempered  if  he  could  but  catch  a closeup  glimpse  of 
ours.  The  number  they  gave  him  for  America's  return 
on  its  space  investment  was  not  $7,  but  $20  for  each 
dollar  we  spend. 

America  is  the  leader  in  space  and  develops  the 
technology  that  will  allow  the  United  States  to  retain 
the  high  ground  . . . and  produce  for  the  United  States 
Economy. 

What  we  can  do  is  not  in  question.  My  concern  is  about 
our  will  to  do  these  things.  In  particular  I worry  that  an 
accident,  or  any  setback,  no  matter  how  small . . . 
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coupled  with  today's  budget  environment  will  mean 
serious  trouble. 

Our  ability  as  a Nation  to  accept  risk  is  a different  thing. 
I believe  we  in  NASA  did  not  recognize  the  "image" 
which  had  been  created  as  a result  of  our  past  space 
successes.  We  may  have  been  too  successful  in 
previous  programs.  We  did  not  adequately  articulate 
the  risks  and  the  gains  of  our  business,  and  the  reasons 
for  doing  what  we  do.  We  spend  too  much  time  in 
internal  conferences  and  too  little  time  talking  to  our 
constituency,  the  American  public. 

Risk  is  an  essential  element  of  human  progress.  Risk 
must  be  faced  daily  if  America  is  to  remain  a great  and 
free  Nation.  It  is  the  price  we  must  pay, 

CD  vj-  *.***.*&  . ^ 

ThlsSpace  system  we^ly  is  the  most  ingenious  of  man's 
creations.  It  is  composed  of  exotic  metals,  ceramics, 
and  composites ... 

The  shuttle  derives  7 million  pounds  thrust  from  2 
million  pounds  of  solid  propellant  and  1 1/2  million 
pounds  of  hydrogen  and  oxygen  to  lift  our  payloads  to 
orbit.  A flightcrew  will  ride  this  stack  to  orbit . . . when 
things  go  wrong  . . . they  go  wrong  fast.  The  risks  of 
space  flight  are  clearly  defined. 
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We  work  with  engines  that  deliver  100  horse  power  per 
pound  of  weight.  They  are  at  the  leading  edge  of 
technology,  materials,  and  our  ability  to  forecast 
operating  lifetimes.  Six  turbo  pumps  each  the  weight 
of  a Chevy  350  engine  delivers  63,000  horse  power  a 
piece. 

Our  environment  is  a vacuum,  we  work  in  extremes  of 
temperature.  Decisions  must  be  made  in  seconds . . . 
they  are  frequently  irreversible. 

We  design  and  work  to  margins  of  less  than  1 second 
on  a routine  basis.  . 

In  operations,  we  recognize  these  risks ...  we  plan  and 
train  daily,  working  in  real  time  to  manage  the  risks 
inherent  in  space  . . . inherent  in  exploration  and 
inherent  in  leadership.  We  must  make  these  risks,  the 
incredibly  small  margins,  and  the  complexity  of  our 
business,  visible  to  the  Public.  It  is  natural  to  seek  the 
vicarious  thrill  of  risk  . . . we  must  enjoin  the  public  in 
our  business  so  they  become  a "stakeholder"  in  the  risk 
of  space  flight. 

A threat,  however,  remains  that  we  will  have  another 
accident . . . we  may  lose  more  lives  and  spacecrafts.  An 
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accident  could  be  as  simple  as  blowing  a tire  at  180 
knots  at  touchdown  and  departing  the  runway.  This  is 
the  nature  of  our  work.  When  this  happens,  will  we  as 
a Nation  have  the  courage  to  continue  our  quest,  to 
continue  on  the  path  to  the  stars?  Or  will  we  surrender 
our  leadership  to  the-SevTets,  Europeans,  and  Japaneser 

A report  on  space  flight  to  the  1 01st  Congress  in  July 
1989  by  the  Office  of  Technology  assessment  stated: 

"If  the  United  States  wishes  to  send  people  into 
space  on  a routine  basis,  the  Nation  will  have  to  come 
to  grips  with  the  risks  of  human  space  flight.  In 
particular,  it  will  have  to  accept  the  likelihood  that 
loss  of  life  will  occur.  If  such  risks  are  perceived  to  be 
too  high,  the  Nation  may  decide  to  reduce  its 
emphasis  on  placing  humans  in  space." 

This  last  sentence  is  the  most  chilling  ...  If  the  risks  are 
perceived  to  be  too  high  . . . 

The  risks  are  high  . . . there  is  nothing  conservative 
about  space  flight.  This  was  true  for  Alan  Shepard  and 
John  Glenn.  It  was  true  for  Neil  Armstrong  and  John 
Young.  It  will  be  true  on  STS-43  when  we  deploy  TDRS, 
it  will  be  true  the  day  we  leave  for  Mars.  Thank  God  we 
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have  men  and  women  willing  to  risk  the  thunderous 
ride  to  space. 

When  our  next  bad  day  comes ...  it  is  one  that  we  must 
meet  with  conviction.  The  conviction  that  the  gains  in 
space  are  worth  risk,  and  are  worth  sacrifice.  As  a 
Nation,  we  must  recognize  that  space  and  risk  are 
essential  elements  of  our  way  of  living  . . . and 
eventually  our  ability  to  lead  the  world.  The  gain  is 
manifold  ...  it  has  many  parts  and  forms. 

• Space  is  a instrument  of  our  foreign  policy. 

• Space  is  an  element  of  our  National  defense. 

• Space  is  dominant  contributor  to  technology  and 
thus  to  our  economy. 

• Space  is  essential  to  our  progress  in  science, 
engineering,  and  medicine. 

• Space  provides  an  inspiration  for  our  people,  a 
challenge  to  our  educational  systems ...  it  uplifts 
the  eyes  of  our  youth,  it  unites  us. 

• Space  teaches  us  to  conserve  and  use  wisely  our 
resources ...  to  protect  Earth  and  its  environment. 

We  must  assess  these  space  benefits  as  a united  team  . . 

. so  that  we  can  answer  the  harbingers  of  gloom  . . . 
those  with  the  "do  nothing"  attitude  . . . the  pessimists. 
We  must  be  strong  ...  for  the  pessimists  cannot  rise  to 
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the  challenge, . . . they  cannot  create  . . . they  can't 
Innovate.  It  is  up  to  us  to  lead,  to  take  the  risks  to  lead. 
We  must  have  conviction  if  we  are  to  lead.  We  must 
have  conviction  if  we  are  to  fulfill  our  destiny. 

Another  of  my  concerns  tha*-ceme^terTEtfee 
Gh^terrget-Qccident  involves  our  aspirations  as  a 
Nation.  It  appears  that  we  as  a Nation  are  intent  on 
finding  the  neutral  ground  . . . we  do  not  follow  our 
instincts  and  we  have  become  a Nation  seeking 
consensus.  We  have  developed  a paralysis  of  the  will, 
and  are  no  longer  willing  to  be  uncomfortable  in 
anything  we  do.  In  one  fleeting  moment  we  overcame 
this  during  "Desert  Storm"  . . . There  the  objectives, 
assets,  and  commitments  were  clear . . . but  they  were 
remote  to  all  but  a few. 

We  are  increasingly  unable  to  meet  our  daily 
challenges,  and  effectively  utilize  the  opportunities  of 
the  present.  Boldness  in  most  cases  is  no  longer  a key 
word  in  our  vocabulary.  Our  horizons  are  increasingly 
self-centered  . . . we  have  forgotten  our  debt  to  our 
predecessors. 

President  Bush  clearly  stated  his  position  on  American 
Leadership  in  the  space  arena  on  July  20th  1989.  He 
said  that  it  was  time  to  look  to  the  future,  he  saw  an 
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opportunity  and  he  intended  to  seize  the  opportunity  . . 
. "to  make  a long  range  continuing  commitment  in 
space.  For  the  90's  he  stated  our  next  critical  step  was 
toward  the  Space  Station  Freedom  . . . and  for  the  new 
century,  back  to  the  Moon.  Back  to  the  future,  and  this 
time  back  to  stay." 

I like  those  words  "back  to  stay"  ... . those  are  the 
words  of  leadership.  They  are  tough  . . . they  are  clear . 

. . they  are  a challenge! 

Many  have  criticized  the  speech  because  it  did  not  set  a 
timetable  . . . and  it  did  not  say  how  it  would  be 
financed.  NASA  must  lead  in  establishing  a plan  that 
involves  all  U.S.  Government,  industrial  and  scientific 
elements  and  those  of  the  world.  We  must  sell 
Congress  and  the  American  people  ...  it  then  becomes 
the  responsibility  of  the  American  people  to  determine 
how  much  they  are  willing  to  sacrifice  for  their  present 
and  for  their  future. 

William  Jennings  Bryan  stated  --  "Destiny  is  not  a 
matter  of  chance,  it  is  a matter  of  choice  ...  it  is  not  a 
thing  to  be  waited  for . . . it  is  a thing  to  be  achieved. 
Those  who  may  doubt  our  chances  should  remember. 
"The  only  footprints  on  the  Moon  are  American."  "The 
only  flag  on  the  Moon  is  an  American  flag."  "The  know 
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how  that  accomplished  these  feats  is  American  know 
how." 

What  Americans  dream,  Americans  can  do. 

So  now  I return  to  where  we  started  . . . Space  provides 
the  focus,  the  challenges  for  a great  people  ...  It 
provides  us  the  measure  to  determine  our  willingness 
to  be  great,  and  the  courage  to  make  the  inevitable 
sacrifices.  It  is  the  force  upon  which  we  will  shape  our 
beliefs  that  we  are  truly  the  most  fortunate  of  all 
peoples  on  earth  . . . We  are  American  . . . 

We  must  personally  develop  our  convictions  on  why  we 
are  in  space,  what  we  are  to  do,  how  much  we  are 
willing  to  risk.  Then  after  we  have  established  these 
convictions,  we  must  carry  these  beliefs  to  the  people. . 

. we  must  avoid  trivializing  our  work  by  spinoffs  . . . we 
must  make  the  "people  next  door"  stakeholders  in  the 
glories  and  risks,  the  achievements  and  the  defeats. 

We  must  become  foot  soldiers  and  we  must  be 
convincing  from  now  on. 

Space  flight  in  on  the  line. 

THANK YOU 
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• TO  SUPPORT  ITS  ASSIGNED  ROLES,  THE  MCC  MUST  PROVIDE  MAXIMUM 
USER  EFFICIENCY,  MAINTAINABILITY,  AND  RELIABILITY  IF  IT  IS  TO 
CONTINUE  SUCCESSFUL  SUPPORT  FOR  THE  SHUTTLE  FLIGHT  MANIFEST. 
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THE  MISSION  CONTROL  CENTER  UPGRADE  ERA'S 
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VIDEO  HARDCOPY  SYSTEM 
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COMMUNICATIONS  BANDWIDTHS 
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ADDITION  OF  WEATHER  COMPUTATIONAL  RESOURCES 
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TRAJECTORY 

RECEIVES  TRAJECTORY  FROM  MISSION  OPERATIONS  COMPUTER  (MOC). 


• ULCMD  U/L  CMD  (ATTH 


MPCC  Functional  Data  Flow 


THE  SPACE  SHUTTLE  MISSION  CONTROL  CENTER,  YEAR  2000 
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STRING  AT  A TIME. 


Front  End  Replacement  - Phase 
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MCCER  Overview 

After  Front  End  Replacement  Complet 
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Host  Replacement 
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MCC  SYSTEM  OVERVIEW 

(DISPLAY  AND  CONTROL  SYSTEM  REPLACEMENT) 
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DISPLAY  AND  CONTROL  SYSTEM  REPLACEMENT  DESCRIPTION 


PROVIDES  FOR  DISPLAY  SHARING 


DISPLAY  AND  CONTROL  SYSTEM  REPLACEMENT  DESCRIPTION 
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MCC  System  Overview 
(LAN/Workstation  Replacement) 


LAN/WORKSTATION  REPLACEMENT  DESCRIPTION 


MCC  System  Overview 
Final  System  Configuration 
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FAM  Interprets  Output  of  Subsystem  Expert  System 
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ASSTC  Laboratory  Environments  Support 
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REAL  TIME  DATA  SYSTEM  (RTDS) 
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- STARTED  IN  MAY  1988  - OPERATIONALLY  USED  DURING  STS-26  SEPT  88 
- EMERGENCY  MISSION  CONTROL  CENTER  DEMONSTRATION  (DEC  1987) 


REAL  TIME  DATA  SYSTEM  (RTDS) 
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NETWORK  INSTALLED  FOR  DISTRIBUTING  SOFTWARE  AND  REAL  TIME 
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WORKSTATION  INSTEAD  OF  INTEGRATED  SIMULATIONS 


REAL  TIME  DATA  SYSTEM  (RTDS) 
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DPI  1/JFMuratore:Real  Time  Data  System  (RTDS):6/18/91 


REALTIME  DATA  SYSTEM  (RTDS) 
ARCHITECTURE 
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REALTIME  DATA  SYSTEM  (RTDS) 
ARCHITECTURE 


DPI  1/JFMuratore:Real  Time  Data  System  (RTDS): 6/1 8/91 


REALTIME  DATA  SYSTEM  (RTDS) 
ARCHITECTURE 
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TELEMETRY  DECOMMUTATION  DONE  IN  DATA  DRIVER  WORKSTATIONS,  COTS  PROCESSOR  PERFORMS  FRAME  SYNC  ONLY 
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DPI 1/JFMuratore:Real  Time  Data  System  (RTDS): 6/1 8/91 


REAL  TIME  DATA  SYSTEM  (RTDS) 
UPGRADE  PARADIGMS 
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REAL  TIME  DATA  SYSTEM  (RTDS) 

RTDS  TOP  LESSONS  LEARNED 

FIND  A CUSTOMER  WHO  REALLY  WANTS  AND  NEEDS  THE  TECHNOLOGY 
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ACQUISITION  WITH  APPLICATIONS  (BO 
GNC) 


REAL  TIME  DATA  SYSTEM  (RTDS) 
RTDS  TOP  LESSONS  LEARNED 
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REALTIME  DATA  SYSTEM  (RTDS) 
RTDS  TOP  15  LESSONS  LEARNED 


U.S.  Gov  t 


co 

< < 

O § 

5 >■ 

Cd  H 

S5 

LU 
> 
h- 

u 
< 

>• 


Ul 

< 


LU 

cd 

LU 


< 

Cd 

LU 


h- 

U 

< 

LU 

cd 

LU 


cd 

o 

> 

cd 


LU 

H 

CO 

cd 

O 


CO 


< 

u 


LU 

u 

co 

< 


a 

cd 

o 

U 

LU 

cd 

LU 

Q. 

< 

H 

d 

LU 

co 

LU 

to 

< 


X 


CO 

< 


& * < 

2^2 

W IL  ^ 

ga2 

§11 

WWW 


to 

D 

a 

u 

< 

< 

< 

Q 

Li. 

o 

CO 


5 

I- 


O 

I- 

LU 

D 

Q 

co 

LU 

n 

h 

LU 

2 

o 

co 


O 

H 

LU 

D 

Q 

Z 

o 

H 

CO 

Z 

< 

QC 

H 

LU 

tO 

< 

X 

Q. 

H 

< 

CO 

LU 

H 

D I 

h-U 

LU  I— 
CO  ^ 


— LD 


co 


2§ 

ai 

LL 
CO  w 

& 

Q C yj 

>:2 

3 LU 

5 -j 

< LU 

LU  H 


> 

Cd 


O 

co 

UJ 

CO 

< 


LU 

0£ 

LU 


y < 
o 2 
o o 

-*  h- 

w 2 

z < 

s * 

LU  CO 
LU  < 

h i- 

Q S 

< I 

\D  O 
Z ^ 
X * 

& s 

“ I 

Q 5 


in 


317 


DPI  1/JFMuratore:Real  Time  Data  System  (RTDS): 6/1 8/91 


REAL  TIME  DATA  SYSTEM  (RTDS] 
RTDS  TOP  15  LESSONS  LEARNED 
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BIG  TRAINING  VALUE  - WHENEVER  OPERATOR  USES  SCHEMATIC  TYPE 
DISPLAY  THEY  ARE  BEING  TRAINED  ON  SYSTEM 


REAL  TIME  DATA  SYSTEM  (RTDS) 
RTDS  TOP  1 5 LESSONS  LEARNED 
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ALLOW  RAPID  CUSTOMIZATION  IN  ORDER  TO  COMPETE  WITH  HIGHLY 
CUSTOMIZED  SYSTEMS 


REAL  TIME  DATA  SYSTEM  (RTDS) 

RTDSTOP  LESSONS  LEARNED 

#10  - ONCE  IN  OPERATIONS,  MUST  PLAN  AROUND  THE  CLOCK  SUPPORT  IN  THE 
OPERATIONS  LOCATION 
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PROBABLY  NOT  POSSIBLE  INITIALLY  BUT  MUST  MAKE  HERCULEAN 
EFFORTS  TO  MAINTAIN  USER  CONFIDENCE 


REAL  TIME  DATA  SYSTEM  (RTDS) 
RTDS  TOP  LESSONS  LEARNED 
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REAL  TIME  DATA  SYSTEM  (RTDS) 
CONCLUSION 
FINAL  THOUGHTS 
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ORIGINAL  PAGE  IS 
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Perhaps  one  of  the  most  powerful 
symbols  of  the  United  States’ 
technological  prowess  is  the  Mission 
Control  Center  (MCC)  at  the  Lyndon  B. 
Johnson  Space  Center  in  Houston,  Texas. 
The  rooms  at  Mission  Control  have  been 
witness  to  major  milestones  in  the 
history  of  American  technology  such  as 
the  first  lunar  landing,  the  rescue  of 
Skylab,  and  the  first  launch  of  the  Space 
Shuttle.  When  Mission  Control  was  first 
activated  in  the  early  1960's,  it  was  truly 
a technological  marvel.  This  facility 
however  has  received  only  modest 
upgrades  since  the  Apollo  program. 

Until  recently  it  maintained  a single 
mainframe  based  architecture  that 
displayed  data  and  left  the  job  of  data 
analysis  to  human  beings.  The  display 
technology  utilized  in  tnis  system  was 
monochrome  and  primarily  displayed 
text  information  only  with  limited 
graphics  {picture  1).  An  example  display 
of  250  communication  parameters  is 
shown  in  picture  2. 

The  system  processed  incoming  data 
and  displayed  it  to  the  flight  controllers, 
however  it  performed  few  functions  to 
turn  raw  data  into  information.  The  job 
of  turning  data  into  information  upon 
which  flight  decisions  could  be  made 
was  performed  by  the  flight  controllers. 
In  some  cases,  where  additional 
computational  support  was  required, 
small  offline  personal  computers  were 
added  to  the  complex.  Flight  controllers 
visually  copied  data  off  thf  console 
display  screens,  and  manually  entered 
the  data  into  the  small  personal 
computers  where  offline  analysis  could 
be  performed. 

Although,  this  system  vyas 
technologically  outdated,  it  contained 
years  of  customizing  efforts  and  served 
NASA  well  through  the  early  Space 
Shuttle  Program.  Several  factors  are 
now  driving  NASA  to  change  the 
architecture  of  Mission  Control  to 
accommodate  advanced  automation. 
First  is  the  reauirement  to  support  an 
increased  flight  rate  without  major 
growth  in  the  number  of  personnel 
assigned  to  flight  control  duties.  We  are 
attempting  to  fly  more  missions  with  the 
same  staff  to  control  operational  costs. 


NASA  is  using  automation  to  expand  the 
capabilities  of  individuals  so  they  can 
accomplish  more  work.  This  concept  of 
"more  work  for  the  same  dollar"  is  very 
different  from  trying  to  automate  a 
factory  where  the  desire  is  to  replace 
humans  with  robotics  and  "do  the  same 
work  for  less  dollars."  In  Mission 
Control,  the  goal  is  to  support  the 
human  operator,  and  not  to  eliminate 
the  human. 


Picture  1 - Space  Shuttle  Mission  Control 


Picture  2 - Typical  Mainframe  Display 


5.1-1 
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A second  major  concern  is  loss  of 
corporate  knowledge  due  to  the  unique 
bimodal  age  distribution  of  NASA. 

Hiring  freezes  between  the  Apollo  and 
Shuttle  programs  have  resulted  in  two 
primary  groups  in  NASA.  Approxi- 
mately, half  of  NASA  consists  of  Apollo 
veterans  within  5 years  of  retirement. 
The  other  half  consist  of  personnel 
under  .^5  with  Shuttle-only  experience. 
TJASA  considers  it  highly  desirable  to 

capture  the  corporate  knowledge  of  the 
Apollo  veterans  in  knowledge  based 
systems  before  they  retire.  Because  the 
mainframe  complex  is  primarily  oriented 
to  data  display,  it  is  a poor  environment 
for  capturing  and  utilizing  knowledge. 

These  factors  have  resulted  in  aggressive 
efforts  by  NASA's  Mission  Operations 
Directorate  to  utilize  a distributed 
system  of  Unix  (TM)  engineering-class 
workstations  to  run  a mix  of  onfine  real 
time  expert  systems  and  traditional 
automation  to  allow  flight  controllers  to 
perform  more  tasks  ana to  capture  the 
corporate  knowledge  of  senior 
personnel.  Starting  with  the  first  flight 
of  the  Space  Shuttre  after  the 
Challenger  accident,  this  effort,  named 
the  Real  Time  Data  System  (RTDS),  has 
played  an  increasingly  significant  role  in 
the  flight-critical  decision  making 
process. 

APPLICATIONS  EXAMPLES 

The  application  of  these  techniques  has 
resulted  in  a new  "look  and  feel"  to 
Mission  Control.  Picture  3 shows  an 
telemetry-animated  schematic  of  the 
Shuttle’s  communication  and  tracking 
system.  This  display  contains  all  of  the 
information  contained  on  the 
traditional  monochrome  text  display 
shown  in  picture  2.  The  display  utilizes 
color  graphics  to  organize  the 
information  into  a schematic.  It  also 
contains  rules  which  draw  inferences 
about  the  systems  performance  and 
operation  from  the  telemetry. 

Previously,  a major  part  of  an  operator's 
training  was  to  learn  how  to  look  at 
complex  displays  of  digital  data  and 
build  a mental  model  of  the  system. 

Only  after  this  training  was  complete, 
could  an  operator  be  trained  to  evaluate 
the  situation  and  make  recom- 
mendations. Utilizing  the  RTDS 
approach  allows  the  operator  to  utilize 
the  expertise  of  senior  operators 
captured  in  the  display  program  to  build 
a mental  model  of  the  system  and  jump 
to  learning  how  to  evaluate  the  system 

This  effort  has  also  resulted  in  dramatic 
new  and  unexpected  capabilities.  For 
example,  flight  controllers  who  monitor 
the  Shuttle's  Remote  Manipulator 
System  (RMS)  traditionally  determined 
the  position  of  the  "robot  arm"  by 


Picture  3 - Telemetry-Animated 

Communications  Schematic  On 
Workstation 


observing  digital  readouts  of  the  angles 
of  each  of  the  arms  joints.  A combina- 
tion of  offline  tools  and  mental 
gymnastics  allowed  operators  to 
determine  the  arm's  position  and  advise 
astronauts  on  operation.  Picture4 
shows  an  RTDS  application  which 
acquires  real  time  telemetry  of  the  arm's 
angles  and  animates  a view  of  the 
Shuttle  showing  the  arm’s  position.  This 
application  not  only  lowers  the  flight 
controller's  workload,  but  also  allows 
the  controller  to  visually  monitor  for 
potential  collisions  of  the  Shuttle  and 
payloads. 


Picture  A - Remote  Manipulator  System 
Workstation  Display 
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In  another  example,  flight  controllers 
typically  monitored  the  performance  of 
tne  Shuttle's  flight  instruments *by 
watching  digital  displays  of  instrument 
telemetry  describing  the  Shuttle's  roll, 
pitch  and  yaw  attitude  angles  or  the 
bearing  to  the  landing  site.  Picture  5 
shows  an  RTDS  display  which  acquires 
the  real  time  telemetry  on  the  flight 
instruments  and  displays  an  emulation 
of  the  flight  instruments  on  a work- 
station screen. 


Picture  5 - Workstation  Emulation  of 

Shuttle  Flight  Instruments 


RTDS  has  also  been  applied  to  real  time 
data  sources  other  than  telemetry.  One 
of  the  most  significant  applications  has 
been  in  the  evaluation  of  weather  data. 
The  Flight  Director  is  the  NASA 
individual  in  Mission  Control  with  final 
authority  on  all  flight  decisions.  One  of 
the  most  difficult  tasks  for  the  Flight 
Director  during  landing  is  the  selection 
of  runways  based  on  winds.  Because  the 
Shuttle  during  landing  is  essentially  a 
very  large  glider,  it  has  very  critical 
crosswind  limits.  Traditionally,  during 
landings  the  Weather  Officer  would 
read  out  wind  values  from  the  landing 
site  and  the  Flight  Director  was  required 
to  determine  if the  winds  were  within 
limits  by  consulting  a paper  crosswind 
graph.  This  could  get  quite  hectic  as 
there  are  several  runways  and  the  winds 
at  Edwards  Air  Force  Base  are 
notoriously  variable.  In  RTDS  we  built 
an  application  which  receives  the  wind 
reports  electronically  from  the  landing 
sites,  computes  crosswind  components, 
applies  flight  rules  to  determine  if  winds 
are  within  limits,  and  displays  the  results 
graphically  to  the  Flight  Director  in  real 
time.  This  application  dramatically 
lowers  the  Flight  Director’s  workload 
and  enhances  the  safety  of  flight. 


In  developing  RTDS,  NASA  met  several 
challenges  in  the  use  of  Unix  (TM) 
workstations  to  operate  in  real  time  and 
to  provide  real  time  expert  systems  and 
color  graphics  in  mission-critical 
environments.  All  of  these  applications 
required  access  to  real  time  data.  The 
remainder  of  this  paper  explains  the 
techniques  developed  to  acquire  real 
time  data  under  Unix  and  supply  it  to 
expert  systems.  The  techniques 
described  in  this  paper  have  not  only 
been  used  on  Space  Shuttle  but  also  on 
aeronautics  applications.  Systems  have 
been  developed  using  RTDS  for  aircraft 
flight  test  operations  oy  NASA's  Dryden 
Flight  Research  Facility  (reference  1)  for 
monitoring  the  X-29  and  by  the  Air 
Force  Flight  Test  Center  (reference  2)  for 

monitoring  the  F-15short  takeoff  and 
landing  demonstrator  aircraft. 

HARD  AND  SOFT  REAL  TIME 
CONSTRAINTS 

The  most  important  item  to  understand 
in  developing  real  time  Unix 
applications  is  the  difference  between 
hard  and  soft  real  time  constraints.  As 
defined  by  Stankovic  (Reference  3)  real 
time  systems  are  those  where  the 
correctness  of  a computation  is  a 
function  of  both  the  result  of  the 
computation  and  the  time  at  which  the 
computation  is  delivered.  Hard  real 
time  systems  are  those  where  the 
function  is  completely  failed  if  the 
computation  does  not  always  meet  the 
time  constraint.  Soft  real  time  systems 
are  those  where  system  performance  is 
degraded  if  the  time  constraint  is  not 
always  met,  but  can  be  fulfilled  if  the 
conditions  are  met  with  a response 
distribution.  A typical  hard  real  time 
system  is  an  aircraft  flight  control  system 
where  loss  of  control  occurs  if  the  system 
does  not  meet  time  constraints.  An 
example  of  a soft  real  time  system 
would  be  an  airline  reservation  system 
where  slow  response  results  in  degraded 
operations  but  not  system  failure. 

In  RTDS  we  had  to  meet  both  hard  and 
soft  real  time  constraints.  The  hard  real 
time  constraint  occurred  in  the 
acquisition  of  real  time  data  into 
workstations.  The  soft  real  time 
constraints  were  in  the  performance  of 
fault  detection  algorithms,  fault 
detection  rule  based  expert  systems  and 
data  displays.  Understanding  the 
difference  in  these  types  of  constraints  is 
the  key  to  successful  implementation. 

Unix  Data  Acquisition  is  A Hard  Real 
Time  Constraint 

In  RTDS  we  tapped  into  Space  Shuttle 
telemetry  as  soon  as  the  data  reached 
the  Mission  Control  (Diagram  1). 
Telemetry  is  a uniquely  structured  data 
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stream.  In  order  to  minimize  hard  real 
time  processing  in  the  Unix  workstations 
the  basic  telemetry  processing  roles  of 
bit,  frame,  and  subframe  synchroniza- 
tion, and  parameter  extraction 
(decommutation)  were  performed  in  a 
dedicated  telemetry  processor  (Loral 
Instrumentation  ADS-100  or  System 
500).  The  extracted  parameters 
(approximately  5,000  16-bit  words  per 
second)  were  communicated  to  the 
workstations  (Concurrent  6600)  via  a 
Direct  Memory  Access  (DMA)  interface. 
The  DMA  is  based  on  the  Digital 
Equipment  Corporation  (DEC)  DR-1 1 W 
standard  using  an  Ikon  Corporation 
interface  board  installed  in  the 
Masscomp.  The  telemetry  processor 
buffers  the  incoming  telemetry  data  in  a 
1,000  word  First  In  First  Out  (FIFO) 
buffer.  The  buffer  unloads  over  the 
interface  when  polled  by  the 
workstation.  The  hard  real  time 
constraint  was  that  the  FIFO  buffer 
would  lose  data  (overflow)  and  require 
a reset  if  it  was  not  polled  before  it 
filled.  The  Unix  workstation  had  to  poll 
the  system  sufficiently  to  drain  the 
buffer  before  it  overflowed. 

Unix  has  some  well-known  problems 
that  hinder  its  use  in  hard  real  time 
applications.  Unix  normally  does  not 
provide  the  capability  to  assign  hard 
priorities  to  tasks.  This  makes  it 
impossible  to  require  that  a task  execute 
at  a given  rate,  such  as  polling  a 
telemetry  processor  at  four  times  a 
second,  this  is  complicated  by  the  fact 
that  in  most  Unix  implementations  the 
kernel  cannot  be  pre-empted.  Thus, 
even  if  an  external  device,  such  as  a 
telemetry  processor,  needs  service,  the 
kernel  may  block  its  servicing. 
Additionally,  most  Unix  schedulers, 
reduce  a task's  switching  priority  in 
proportion  to  the  processor  time  used. 


This  is  a problem  when  data  acquisition 
is  to  be  performed  continuously  over  a 
several  day  mission.  Most  Unix 
implementations  perform  task 
swapping;  in  addition,  virtual  memory 
versions  also  perform  on-demand 
paging.  If  a task  has  critical  code  or  data 
paged  to  secondary  memory  or  if  the 
entire  task  is  swapped  out,  then  the 
time  to  recover  critical  code  and  data 
may  violate  real  time  constraints.  Unix 
also  typically  buffers  all  disk  transactions 
in  buffer  cache  in  primary  memory.  This 
introduces  an  uncontrolled  factor  in 
critical  disk  I/O  tasks  such  as  data 
logging.  Concurrent  Corporation’s  Real 
Time  Unix  (RTU  - TM  Reference  4)  has 
specific  features  to  allow  the  user  to 
deal  with  these  constraints.  In  specific 
RTU  allows  tasks  to  lock  a memory 
segment,  and  to  circumvent  the  normal 
changes  in  switching  priority  by 
specifying  a fixed  real  time  switching 
priority.  RTU  provides  contiguously 
allocated  disk  files  that  allow  the  user  to 
bypass  the  disk  buffer  cache  mechanism 
and  perform  direct  I/O  to  disk.  RTU 
provides  kernel  pre-emption  within 
specified  time  constraints. 

Even  with  these  capabilities,  data 
acquisition  systems  and  real  time 
applications  under  Unix  must  be 
carefully  structured.  Specifically,  the 
tasks  performing  data  acquisition  must 
be  isolated  from  applications  processing 
so  that  increasing  the  applications  load 
does  not  prevent  the  data  acquisition 
from  meeting  the  hard  real  time 
constraints.  In  order  to  deal  with  this 
problem,  a technique  was  developed  to 
take  advantage  of  multiprocessing 
capabilities  (Diagram  2). 
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In  this  technique  a sinale  "stripped- 
down"  task  manages  tne  DMA 
controller,  instructing  it  to  fill  different 
segments  of  a ring  buffer  in  sequence. 
This  "Ring  Stuffer  was  identified  as  the 
highest  priority  real  time  task  in  the 
system.  A second  task,  called  the 
"Buffer  Stuffer",  reads  the  ring  and 
performs  decoding  steps  to  place  data 
into  time  homogeneous  buffers  in 
shared  memory  that  can  be  accessed  in 
parallel  by  many  applications. 


The  two  stuffers  interact  in  several  ways. 
The  buffer  stuffer  is  set  to  a real  time 
priority  so  that  its  switching  priority 
does  not  degrade  with  accumulated  CPU 
time,  but  at  a lower  priority  than  the 
ring  stuffer  to  prevent  interfering  with 
the  hard  real  time  performance  of  the 

ring  stuffer.  The  Ring  and  Buffer 

stuffers  communicate  their  position  in 
the  ring  through  shared  memory.  If  a 
buffer  being  accessed  by  the  Buffer 
Stuffer  is  about  to  be  overwritten  by  the 
Ring  Stuffer,  then  the  Ring  Stuffer  still 
performs  DMA  to  meet  the  real  time 
constraint  and  prevent  overflow  of  the 
telemetry  processor  FIFO.  The^data  is 
transferred  into  a "bit  bucket",  a spare 
buffer  dedicated  for  this  purpose. 
Although  this  mechanism  can  lose  data, 
acquired  data  is  not  contaminated. 

Whenever  data  is  lost,  tasks  are  notified 
by  flags  in  shared  memory.  When  two 
processors  are  available  in  a 
workstation,  the  two  stuffers  are  run  in 
parallel  on  separate  CPU's  to  prevent 
contention. 


This  dual-stuffer  technique  was  also 
implemented  in  a 80386  Personal 
Computer  running  the  Lynx  (TM)  real 
time  operating  system  to  acquire 
weather  data  tor  the  Flight  Director 
Winds  application.  The  weather  data 
was  acquired  over  an  asynchronous 
serial  line  and  placed  in  a ring  by  one 
task,  and  organized  for  evaluation  in 
time  homogeneous  buffers  by  another 
task. 


Shared  memory  is  vital  for  interprocess 
communication  ip  this  approach.  The 

Unix  AT &T  System  V shared  memory 
implementation  is  very  good  for  real 
time  data  acquisition  and  distribution. 

It  is  important  to  perform  the  data 
acquisition  task  as  a service  and  make 
acquired  data  available  to  all 
applications  by  shared  memory.  If 
shared  memory  is  not  available,  then 
each  application  would  have  to  perform 
significant  data  acquisition  tasks  and 
this  would  severely  limit  the  number  of 
simultaneous  applications.  Shared 
memory  was  also  an  important 
troubleshooting  tool  for  the  data 
acquisition  software.  Normal 
debugging  techniques  typically  involve 
messages  written  into  files  or  to  the 
terminal.  This  assumes  that  the 


debugging  techniques  will  not  impact 
the  proper  operation  of  the  process. 
However,  in  a real  time  environment  the 
use  of  such  techniques  significantly 
affects  the  timing  characteristics  of  the 
system  and  cannot  be  used.  Instead, 

RTDS  logs  information  about  the  data 
acquisition  (such  as  pointers,  number  of 
bytes  transferred,  overflow  flags)  to 
shared  memory.  This  allowed  us  to  build 
graphic  monitors  which  can  be  observed 
in  real  time  to  troubleshoot  data 
acquisition  problems. 

Several  other  RTU  features  are  critical  to 
the  performance  of  RTDS.  These 
included  the  ability  of  an  application  to 
delay  for  time  periods  less  than  1 
second.  This  function  was  required 
because  high  priority  tasks  such  as  the 
buffer  stuffer  had  to  delay  for  incoming 
data  and  the  standard  Unix  minimum 
sleep  of  1 second  was  too  long  to  meet 
rate  constraints.  RTU  provides  a 
mechanism  allowing  delays  as  short  as  1 
millisecond.  RTU  also  provided  a time  of 
day  clock  (for  rate  calculations)  and 
signals  for  trapping  floating  point 
errors.  Floating  point  error  traps  are 
critical  because  noise  in  data  can  cause 
floating  point  errors  and  applications 
must  trap  and  handle  these  errors.  Real 
time  tasks  that  perform  continuous 
cyclic  display  also  need  the  capability  to 
poll  for  user  input  without  holding. 
Conventional  Unix  terminal  drivers 

provide  the  O NDELAY  option  to  allow 
a single  application  to  read  the 
keyboard  without  delay.  This  however 
does  not  provide  a mechanism  for 
controlling  which  applications  should 
receive  the  keyboard  input.  An  X 
Windows  approach  would  be  the 
modern  solution  to  this  problem  and  is 
being  used  by  RTDS  in  its  newest 
applications.  At  the  time  we  started 
RTDS  however,  X Windows  was  not 
available  on  our  equipment,  so  we  used 
mouse  button  signals  with  signal 
handlers  to  provide  inputs  to 
applications.  The  mouse  signals  did  not 
require  polling,  so  cyclic  displays  would 
not  delay  for  user  input.  All  of  the 
applications  received  any  mouse  input 
so  that  the  handlers  were  required  to 
determine  from  the  cursor  location  if 
the  inputs  were  intended  for  their 
application. 

This  technique  has  been  highly 
successful  in  processing  real  time  data. 
During  a recent  mission,  a workstation 
running  a moderate  applications  load 
ran  for  over  3 days  without  an  overflow 
occurring.  With  a heavily  loaded 
workstation  we  experience  an  overflow 
every  10-12  hours.  This  vulnerability 
occurs  because  the  ring  stuffer  runs  as  a 
Unix  application.  It  context  switches 
from  application  state  to  kernel  state 


5.1-5 


329 


whenever  it  executes  the  DMA  Con- 
troller driver.  If  another  application 
requests  a kernel  service  while  the  ring 
stuffer  is  in  applications  state,  the 
context  switch  of  the  ring  stuffer  can  be 
delayed.  To  minimize  the  effects  of  this 
case  we  modified  the  telemetry 
processor  board  to  automatically  reset 
itself  when  an  overflow  occurs.  This  is 
not  completely  satisfactory  as  data  loss 
occurs  during  the  reset  and  we  are 
currently  developing  a version  of  the 
DMA  driver  that  performs  all  of  the  ring 
stuffer  activity  in  the  kernel. 

RTDS  is  an  interesting  statement  on  the 
power  of  current  engineering 
workstations.  The  Apollo  Mission 
Control  Center  used  for  the  lunar 
landings  in  1969  processed  less  than 

1.000  parameters  a second  in  the  large 
mainframes  of  the  time.  RTDS  processes 

4.000  parameters  a second  in  a single 
workstation. 

Data  Display  and  Expert  Systems  are  Soft 
Real  Time  Tasks 

When  we  started  RTDS  we  thought  of 
data  display  and  computation  along 
traditional  mainframe-based  terms. 
Specifically,  we  expected  all  data  to  be 
displayed  and  all  computations  to  run 
on  every  data  sample.  After  some  early 
experimentation  it  became  clear  that  it 
would  not  be  possible  to  display  data 
and  run  rule  based  expert  systems  in  a 
hard  constrained  fashion.  The  nature  of 
rule  based  expert  systems  makes  it 
difficult  to  guarantee  hard  real-time 
performance.  In  rule  based  expert 
systems,  computational  load  varies 
based  on  the  number  of  rules  fired  and 
this  varies  with  circumstances  being 
monitored. 

Examining  the  actual  monitoring  tasks 
performed  by  flight  controllers  reveals 
that  although  data  is  displayed  at  once 
per  second,  it  is  not  monitored  at  that 
rate.  Flight  controllers  are  themselves 
multitasking  and  monitor  several 
screens,  event  lights,  and  voi<?e  loops  as 
well  as  using  other  materials  such  as 
procedpresand  schematics.  The  human 
monitor  is  a "soft"  real  time 
implementation. 

We  also  found  that  the  tasks  could  be 
structured  so  that  only  key  detection 
logic  was  being  evaluated  every  second. 
Supporting  logic  was  only  activated 
when  primary  logic  detected  a problem. 
This  significantly  improved  our  real  time 
performance.  In  specific,  a rule-based 
expert  system  monitoring  the  Shuttle’s 
communications  system  utilized 
approximately  500  rules.  These  were 
initially  implemented  in  CUPS,  a rule 
based  expert  system  tool  developed  by 
the  Mission  Planning  and  Analysis 
Division  at  Johnson  Space  Center.  This 
tool  does  not  have  any  special  real-time 


support.  By  structuring  the  rules  into 
phases  and  enforcing  certain 

precedence,  we  found  that 
approximately  100  rules  were  required 
to  capture  the  key  detection  logic.  In 
the  Unix  environment,  CLIPS  was  able  to 
fire  these  100  rules  approximately  2 to  3 
times  a second.  When  the  key  logic  rules 
detected  problems,  additional  rules 
fired,  which  slowed  down  the  system 
and  caused  only  momentary  violation  of 
real  time  constraints. 

It  is  important  to  realize  that  the  Shuttle 
systems  do  not  normally  operate  with 
continuous  failures  being  introduced. 
One  of  the  goals  of  the  expert  systems  is 
to  provide  expert  evaluation  when 
failures  occur.  If  the  system  slows  down 
when  the  failure  occurs,  but  is  still  able 
to  provide  the  expertise,  then  it  is 
meeting  its  desired  function. 

When  we  performed  tests  on  the 
performance  of  the  fault  detection,  we 
found  that  a large  percentage  of  the 
processing  was  meeting  the  once-a- 
second  constraint  and  all  of  the 
processing  was  being  performed  on  a 2 
to  3 second  cycle.  This  was  not 
detectable  by  flight  controllers  lookinq 
at  the  RTDS  displays. 

We  also  found  that  RTDS  displays 
telemetry  3 to  4 seconds  ahead  of  the 
mainframe  complex.  This  is  because  the 
RTDS  architecture  minimizes  the 
number  of  data  transfers  between 
processors.  Because  the  mainframe 
performs  such  a large  number  of 
computations,  it  requires  extensive 
minicomputer  preprocessing  to  meet 
real  time  constraints.  This  introduces 
significant  delay  in  the  mainframe 
system 

On  several  occasions  during  actual 
Shuttle  flight,  RTDS  has  detected 
problems  and  brought  them  to  the 
attention  of  flight  controllers  before 
they  noticed  the  problems  on  the 
conventional  displays.  In  several  cases, 
the  mainframe  displays  have  been 
completely  removed  from  the  control 
center  ana  the  controllers  rely  entirely 
on  the  workstation  based  displays. 

SUPPORT  TECHNIQUES  FOR  REAL  TIME 
EXPERT  SYSTEMS 

In  developing  the  real  time  data 
acquisition  support  for  expert  systems 
we  utilized  several  critical  techniques. 

The  most  important  technique  is  that  of 
the  time  homogeneous  buffers.  If  task 
automation  or  a rule  based  expert 
system  is  to  combine  several  different 
pieces  of  sampled  information  and 
make  a decision  on  them,  then  the  time 
relationship  of  these  samples  must  be 
known.  Typically  we  try  to  only  combine 
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data  from  the  same  data  acquisition 
sampling  cycle  or  major  frame.  A major 
frame  is  the  time  period  in  a sampled 
data  system  when  all  measurements  are 
sampled  at  least  once.  On  Space  Shuttle 
the  major  frame  is  sampled  and 
transmitted  once  per  second.  All 
measurements  from  a given  major 
frame  represent  a time  homogeneous 
dataset  bounded  by  the  sampling  rate. 

An  example  of  the  importance  of  this 
type  of  relationship  is  detecting  a failed 
reaction  control  system  jet  thruster  on 
the  Space  Shuttle.  There  are  two 
conditions  that  we  want  to  detect.  A jet 
that  does  not  fire  in  response  to 
command  is  considered  failed  off.  A jet 
that  does  not  turn  off  when  the 
command  is  removed  is  failed  on.  So  we 
have  two  rules : 

a.  If  jet  command  is  on  and  jet 
chamber  pressure  is  low, then  jet  is  not 
firing  and  failed  off. 

b.  If  jet  command  is  off  and  jet 
chamber  pressure  is  high, then  jet  is 
firing  and  failed  on. 

If  the  jet  command  telemetry  parameter 
is  not  from  the  same  sampling  period  as 
the  jet  chamber  pressure  command,  two 
things  can  happen  which  cause  a normal 
jet  firing  to  be  misdiagnosed  as  a failure. 
If  the  command  measurement  leads  the 
response  measurement,  then  the  first 
rule  will  be  satisfied  indicating  that  the 
jet  is  not  responding  to  commands.  If 

the  command  lags  the  response,  then 
the  second  rule  will  be  satisfied 
indicating  that  the  jet  is  firing  without  a 
command.  It  is  only  when  the  command 
and  response  are  from  the  same  frame 
that  a normal  firing  will  be  properly 
evaluated. 

In  RTDS  we  placed  data  into  time 
homogeneous  buffers  in  shared  memory 
on  major  frame  boundaries.  We  use 
four  buffers  on  a round  robin  basis.  The 
Buffer  Stuffer  places  telemetry 
parameters  in  the  round  robin  buffers  in 
named  locations  where  they  can  be 
extracted  by  applications  using  standard 
library  routines.  Whenever  a parameter 
is  placed  in  the  buffer  it  is  marked  as 
valid  for  that  major  frame.  The  stuffer 
also  searches  for  the  frame  markers  in 
the  telemetry  stream.  When  a major 
frame  marker  is  detected,  the  buffer 
stuffer  closes  the  buffer  being  updated 
and  makes  it  available  to  applications 
for  reading.  Flags  are  set  in  shared 
memory  to  indicate  the  most  recently 
updated  buffer.  After  releasing  the 
completed  buffer  to  applications,  the 
Buffer  Stuffer  then  opens  the  next 
round  robin  buffer.  Before  starting  to 
fill  this  new  buffer,  data  from  the  last 
major  frame  period  is  copied  into  the 
new  buffer.  All  data  is  marked  as  invalid 


for  the  new  major  frame  when  it  is 
copied  forward.  As  each  parameter  is 
processed  in  the  new  major  frame,  the 
parameter  status  is  updated  to  valid.  By 
copying  forward  the  most  recently 
received  data,  we  ensure  that 
applications  always  have  access  to  the 
most  recently  received  data  (with 
appropriately  marked  validity),  even  if 
the  data  is  not  received  in  a given  major 
frame  due  to  errors  in  transmission.  By 
switching  buffers  and  making  them 
available  to  applications  at  major  frame 
boundaries,  we  maintain  the  time 
homogeneity  of  the  original  sampled 
data  stream. 

In  order  to  maintain  major  frame  time- 
homogeneity  in  the  applications,  it  was 
necessary  to  ensure  that  once  the  data 
acquisition  library  starts  to  pull  data 

from  a buffer,  that  all  of  the  parameters 
are  pulled  from  only  that  one  buffer 
(major  frame).  This  must  happen  while 
Unix  is  switching  applications,  paging 
and  swapping.  It  make  take  more  than  1 
second  for  an  application  to  complete  its 
computation  cycle  between  data 
acquisitions.  Tne  four  round-robin 
buffer  design  gives  an  application  three 
major  frame  times  to  complete  an 
acquisition  before  the  buffer  is 
overwritten. 

This  major  frame  buffer  technique 
maintains  the  data  time  characteristics 
for  automated  monitoring  and  expert 
systems.  Alternative  approaches  have 
been  used  in  other  telemetry  computer 
systems  which  lose  this  critical  time 
relationship  information.  An  alternative 
technique  that  has  been  implemented  in 
at  least  one  major  NASA  system  and  two 
new  commercial  off-the-shelf  telemetry 
monitoring  systems  is  called  the  Current 
Value  Table  (CVT).  In  CVT,  telemetry 
data  is  acquired  and  the  most  current 
values  of  parameters  are  placed  in  a 
single  table  without  regard  to  the  major 
frame.  When  an  application  requests 
data,  the  CVT  ships  out  the  most  current 
value  received  for  the  requested 
parameters.  Because  the  requests  occur 
asynchronously  with  the  data 
acquisition,  it  is  almost  certain  that  data 
from  multiple  major  frames  are  in  the 
same  data  request.  This  technique  may 
be  acceptable  for  low  rate  data  displays 
and  limited  automated  monitoring  but 
is  not  acceptable  for  advanced 
automation  using  rule-based  systems. 

Major  Frame  Buffers  For  Logging  and 
Distribution 

The  major  frame  buffers  are  also  a 
powerful  structure  for  logging  data.  In 
RTDS,  the  buffer  stuffer  logs  all 
parameters  to  disk  in  contiguous  files 
RTDS  has  an  "instant  replay"  mode 
where  real  time  data  acquisition  is 
stopped  and  a "replay  stuffer"  is  used  to 
stuff  data  into  the  major  frame  buffers. 
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In  this  way  all  of  the  real  time 
applications  can  be  used  in  playbacks. 

The  replay  stuffer  has  a control  panel 
which  is  fashioned  after  a conventional 
Videocassette  Recorder  control  panel. 
We  chose  this  interface  because  it  was 
familiar  to  almost  everyone  and  it  has  all 
of  the  functionality  needed.  With  the 
VCR  control  panel  users  can  playback 
data,  view  in  fast  forward,  "rewind,"  or 
Shuttle  between  set  points.  Speed  of 
the  playback  can  be  adjusted  for  slow- 
motion  analysis. 

This  capability  has  turned  out  to  be 
essential  for  three  reasons.  First,  the 
capability  was  essential  for  debugging 
the  automation  applications.  Data 
signatures  captured  during  actual  flight 
or  simulations  can  be  replayed  time  and 
time  again  to  work  out  bugs  in 
automation  and  expert  systems  as  well 
as  to  perform  regression  testing. 

Second,  as  a real  time  tool  this  capability 
has  enabled  operators  to  significantly 
cut  the  time  reauired  to  view  playback 
data.  This  capability  was  used 
dramatically  after  the  pad  engine 
shutdown  and  countdown  abort  on  the 
first  STS-34  launch  attempt.  RTDS 
enabled  engineers  and  managers  to 
replay  the  shutdown  within  minutes  to 
troubleshoot  the  cause.  This  is  a bia 
improvement  over  the  current  playback 
systems  which  can  take  from  30  minutes 
to  5 hours  to  retrieve  playback  data.  In 
fact,  the  director  of  Mission  Operation 
has  stated  that  RTDS  paid  for  its  entire 
development  in  those  few  minutes. 

Third,  there  has  been  an  unexpected 
training  benefit  from  the  playback 
capability.  Flight  controllers  can  record 
simulations  and  then  play  them  back  at 
their  convenience  for  training.  Several 
training  objectives  in  flight  controller 
certification  are  now  met  by  this 
technique.  This  saves  the  large  costs 
associated  with  meeting  training 
objectives  by  a full-up  simulations  with 
the  entire  simulator,  control  center,  and 
flight  team  in  place. 

The  major  frame  buffer  is  also  natural 
format  for  distributing  data  over  local 
area  networks.  In  RTDS  we  distribute 
major  fr^me  buffers  over  Ethernet  (TMT 

This  enables  RTDS  to  provide  remote 
telemetry  monitoring  and  software 
checkout,  even  on  computers  which 
could  not  normally  support  real  time 
data  acquisition.  The  User  Datagram 
Protocol  (UDP)  subset  of  TCP/IP  was  used 
to  provide  a connectionless 
unacknowledged  data  transfer.  This 
allowed  the  transmitting  workstation  to 
be  unaffected  by  the  receiver 
workstation  if  the  receiver  was  unable 
to  keep  up  with  the  transmitter.  This 
capability  has  allowed  us  to  conduct 
operational  demonstrations  where 
flight  controllers  monitored  data  out  of 
their  offices.  We  sent  the  data  to  the 


experts,  rather  than  sending  the  experts 
to  the  control  center.  This  technique 
will  become  more  important  as  NASA 
pursues  long  term  missions  such  as  Space 
Station  where  it  becomes  less  feasible  to 
tie  experts  down  to  a central  location. 

Data  Quality  of  Frames  and  Individual 
Parameters 

In  order  for  expert  systems  and  task 
automation  to  use  real  time  data,  it  is 
necessary  to  determine  the  quality  of 
the  data.  There  are  two  measures  of 
data  quality,  the  quality  of  a major 
frameand  the  validity  status  of 
individual  parameters. 

In  order  to  determine  the  validity  of  a 
frame  of  data,  we  utilized  the  fact  that 
each  major  frame  of  telemetry  is  is 
divided  into  a number  of  smaller  frames, 
called  minor  frames.  Each  minor  frame  # 
contains  an  identifying  counter.  In 
Shuttle  there  are  100  minor  frames  per 
major  frame  and  one  major  frame  per 
second.  Parameters  are  spread  across 
the  minor  frames.  In  telemetry  systems, 
data  can  be  interrupted  due  to  radio- 
frequency  noise  on  the  space-to-ground 
link.  Typically  noise  is  of  short  duration 
and  will  only  affect  one  or  two  minor 
frames. 

In  order  to  inform  applications  when 
noise  was  present,  the  minor  frame 
counter  is  transferred  via  DMA  to  the 
workstation.  The  Buffer  Stuffer 

examines  each  frame  counter  to  ensure 
that  all  100  frames  are  received  in 
sequence  for  a given  major  frame.  This 
Quality  parameter  is  expressed  as  a 
numberfrom  0 to  100  indicating  a 
rough  percentage  of  the  quality  of  the 
data.  The  Quality  parameter  is  placed  in 
shared  memory,  with  one  quality 
estimate  for  each  major  frame  buffer. 
Applications  receive  the  buffer  Quality 
value  whenever  they  reguest  data  from 
a buffer.  In  this  way  applications  can 
chose  to  display  or  discard  data  based  on 
overall  data  quality.  In  many  data 
display  tasks  in  RTDS  we  chose  to  display 
all  of  the  data  even  in  high  noise  (low 
Quality)  conditions.  In  critical  task 
automation,  we  discard  all  data  that 
does  not  have  a 100  percent  quality  to 
prevent  erroneous  results. 

There  are  approximately  32,000 

Carameters  in  the  Space  Shuttle  system 
ut  only  approximately  half  of  them  are 
being  downlinked  at  any  one  time.  This 
is  due  to  the  restriction  of  the  downlink 
bandwidth  of  the  telemetry  system  and 
recognizes  the  fact  that  certain  data  is 
not  reauired  during  all  flight  phases.  For 
example,  engine  data  is  only  needed 
during  launcn.  If  during  a major  frame, 
data  is  not  in  the  specific  telemetry 
format,  then  RTDS  marks  the  individual 
parameter  status  as  invalid.  When  an 
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application  attempts  to  acquire  the 
parameter,  the  application  receives  both 
the  value  and  the  status  of  the 
parameter  from  the  buffer. 

Individual  parameter  validity  status  is  an 
important  technique  that  has  been 
overlooked  in  several  NASA  and 
commercial  systems  and  caused  serious 
architectural  problems  when  retrofitted 
into  these  systems.  This  function  must 
be  provided  by  the  data  acquisition 
subsystem.  Without  a system  solution, 
each  application  must  contain  sufficient 
format  definition  information  to 
independently  assess  validity.  This  is  a 
severe  software  maintenance  and  leaves 
the  possibility  that  applications  might 
function  improperly  due  to  stale  data. 

Calibration  and  Conversion 

In  typical  flight  vehicle  telemetry 
systems  data  originates  from  one  of  two 
majorsources.  Some  data  is  acquired 
directly  from  sensors  and  other  data  is 
the  result  of  computations  in  the 
onboard  computer.  Calibration  is  the 
function  of  calculating  engineering  unit 
values  (temperature,  pressure,  etc.  j 
from  sensor  telemetiy.  Conversion  is  the 
process  of  transforming  values  from  the 
word  formats  of  the  flight  vehicle 
computer  into  the  word  formats  of  the 

? (round  computer.  Both  of  these 
unctions  must  be  performed  if  an 
expert  system  is  to  use  telemetry. 

Typical  sensors  convert  some  physical 
quantity  (e  g.  temperature,  pressure) 
into  an  analog  value  proportional  over  a 
specified  range  (Diagram  4).  Sensor 
output  voltages  are  normally  amplified 
and  then  converted  to  a digital  value. 
These  values  are  usually  called  " counts." 
The  sensor  value  in  counts  (8,  10, 1 1,12 
and  1 6 bit  are  popular  sizes)  is  placed  in 
a serial  stream  for  transmission  to  the 
ground.  On  the  ground,  the  computer 
system  converts  these  to  a number 
representing  a physical  quantity.  This  is 
because  it  is  much  easier  for  humans  and 
expert  systems  to  reason  about  physical 
quantities  than  "counts."  This  is  done 
with  a calibration  curve  of  the  form: 


y = A(0},+  A(1)*X  + A(2)*X?  + A{3)*X5  + 

where  the  counts  are  supplied  as  the  X 
values  and  the  A(N)  values  are  the 
coefficients.  In  RTDS  we  use  the  Shuttle 
program  standard  fifth  order 
polynomials.  The  coefficients  for  this 
polynomial  are  stored  in  shared  memory 
so  they  can  be  viewed  and  altered  and 
to  assure  they  are  common  to  all 
applications.  Acquired  data  is  placed  in 
tne  shared  memory  in  "counts"  and 
when  applications  request  data,  the 
shared  memory  is  examined  to  obtain 
and  apply  the  calibration  curve. 


Flight  vehicle  computers  historically 
have  unique  architectures  due  to  the 
demands  on  weight,  size,  power 
consumption  ana  reliability  in  hostile 
environments.  In  fact, the  Space  Station 
program  is  the  first  NASA  manned 
program  to  specify  a hardened  standard 
commercial-off-the-shelf  architecture 
for  a flight  computer  (80386).  Because 
flight  computers  tend  to  be  unique,  they 
usually  have  unique  floating  point 
formats  (Diagram  5).  Unix  workstations 
usually  use  IEEE  standard  floating  point 
formats  or  manufacturers  variants.  The 
data  acquisition  subsystem  must  be  able 
to  convert  between  these  different 
number  representation  subsystems  if 
the  display  user  or  expert  system  is  to 
interpret  the  data.  In  RIDS  we  keep  the 
parameter  conversion  information  in 
shared  memory  together  with  the 
calibration  curve.  Data  is  kept  in  the 
flight  vehicle  form  in  the  shared 
memory.  When  an  application  requests 
data,  the  shared  memory  is  used  to 
select  and  apply  the  appropriate 
conversions.  Twelve  different  types  of 
conversions  are  required  on  Space 
Shuttle.  Override  modes  for  both 
calibration  and  conversion  are  provided 
in  the  library  calls  so  that  user 
applications  can  acquire  raw  data 
directly  as  it  was  downlinked  from  the 
vehicle. 

Noise  Filtering 

Even  when  the  quality  and  individual 
parameter  validity  mechanisms  are  used, 
there  still  is  the  possibility  of  getting 
incorrect  data  into  a real  time  expert 
system.  There  are  two  basic  sources  of 
error.  First,  communications  noise  may 
be  of  very  short  duration  so  as  to  only 
affect  a small  number  of  bits.  If  the 
noise  doesn’t  affect  a frame  counter  or 
frame  synchronization  marker,  then  it  is 
difficult  to  determine  (from  a data 
communications  standpoint)  that  an 
error  has  occurred.  Some  telemetry 
systems  use  parity  bits  on  individual 
parameters  and  frames  or  a forward- 
error-correction  technique  but  these  are 
not  available  on  Shuttle.  The  second 
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source  of  noise  is  the  sensor  itself. 
Sensors  are  nonideal  devices  and  can  be 
noisy.  In  RTDS  we  applied  "noise- 
filtering"  techniques  to  minimize  the 
effects  of  these  errors  on  applications. 

The  first  technique  was  applicable  to 
discrete  (binary  1 or  0)  values,  such  as 
switch  settings  and  valve  positions. 
Whenever  one  of  these  items  changed, 
it  would  not  be  provided  to  the  expert 
system  unless  the  change  was  present 
for  a specified  number  of  seconds  (N). 
This  N-count  noise  filter  is  a technique 
which  has  been  used  successfully  in  the 
onboard  automation  of  the  Space 
Shuttle.  The  problem  with  this  filter  is 
that  a "chattering"  sensor  is  not 
detected  if  it  changes  state  faster  or  at 
the  same  rate  as  the  noise  filter. 
Operationally,  the  N-count  algorithm 
worked  well  for  our  applications. 

The  second  technique  was  applicable  to 
numbers.  A numeric  value  may  take 
many  values.  In  a slowly  changing 
situation  the  same  N Count  algorithm 
used  for  discretes  can  be  used.  But 
where  values  change  rapidly,  comparing 
updates  to  the  last  value  can  result  in  no 
updates  being  made  available  to  the 
expert  system  because  the  last  value 
never  stabilizes.  For  fast  changing 
numeric  values  we  used  reasonableness 
tests.  The  expert  systems  and 
automation  would  reject  values  that 
were  not  in  a specified  reasonable  range 
for  that  parameter. 

In  some  cases,  these  checks  were 
performed  within  the  expert  system  or 
automation.  But  in  many  cases  the  same 
noise-filtered  value  was  required  by 
several  applications  (automated  fault 
detection,  displays  etc...).  In  these  cases, 
we  wanted  a single  authoritative  copy 
for  all  applications.  We  used  another 
shared  memory  buffer  to  which  the 
noise  filtering  routines  could  write.  This 
"signal  buffer"  was  accessible  by  all 
applications  by  requesting  parameter 
names  througn  a library  routine.  This 
"signal  buffer"  did  not  represent  a 
major  frame  time-homogeneous  buffer. 


Because  noise  filters  are  set  at  different 
values  for  each  parameter,  there  was  no 
way  to  maintain  time  homogeneity.  The 
mechanism  however  worked  very  well 
as  both  a repository  for  "best-estimate" 
values  for  low  dynamics  tasks  and  a 
general  purpose  mechanism  for 
communicating  results  between 
applications.  Many  applications  used 
this  mechanism. 

FLIGHTTEST  - THE  SKY’S  NO  LONGER 
THE  LIMIT 

It  is  appropriate  that  this  conference's 
title  includes  the  statement  that  the  sky 
is  no  longer  the  limit  for  flight  test. 

RTDS  ana  similar  systems  will  be  used  in 
the  next  few  years  by  NASA  to  perform 
the  most  extensive  set  of  space  flight 
technology  tests  since  the  early  1960's. 
NASA's  manifest  for  the  next  few  years 
contains  several  missions  which  will 
flight  test  new  technologies  such  as 
tethers,  aerobrakes,  and  free-flying 
telerobots  in  near-earth  orbit.  All  of 
these  missions  require  advanced 
telemetry  monitoring  and  visualization 
techniques  similar  to  those  developed  in 
the  RTDS  project. 

The  Tethersat  will  be  flown  on  STS-46, 
currently  scheduled  for  late  1991 
(picture  6).  This  will  be  the  first  attempt 
to  ever  use  a large  scale  tether  between 
two  orbiting  objects.  This  flight  will 
explore  the  motion  and  electrodynamics 
of  tethers  in  orbit. 


Picture  6 - Tethersat 
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Also  in  late  1991,  STS-49  will  test 
elements  of  the  Flight  Telerobotic 
Servicer  (FTS  picture  7).  The  FTS  is  being 
developed  by  Goddard  Space  Flight 
Center  as  a tool  to  assist  in  the  assembly 
of  the  Space  Station.  It  can  operate  in 
free-flying  mode  or  attached  on  the  end 
of  the  RMS  The  STS-49  flight  wil  be 
used  to  conduct  flight  experiments  on 
prototype  hardware  elements.  The  first 
actual  flight  of  the  complete  FTS  will  be 
performed  on  STS-72  m late  1993  This 
will  qualify  the  equipment  for  use  in 
Space  Station  assembly  in  1995 


Picture  7 - Flight  Tele-Robotic  Servicer 


In  late  1994  the  Aero-Assist  Flight 
Experiment  (AAFE)  will  be  flown  on  STS- 
82  This  flight  will  deploy  an  unmanned 
free-flying  vehicle  which  will  fly  a 
aerobraking  profile  (picture  8)  to 
demonstrate  the  feasibility  of  using 
atmospheric  aerodynamic  braking  to 
alter  orbits.  This  technology  is 
considered  crucial  for  capturing  vehicles 
returning  to  earth  from  the  moon  in 
future  lunar  exploration  programs. 


An  Aeroassist  Flight  Expr riment  (AFE)  mission  scenario  calls 
for  the  AFE  lobe  deployed  from  the  cargo  bay  of  the  Space 
Shuttle.  A solid  rocket  motor  <SRM)  will  accelerate  the  vehicle 
to  33,800  feet  per  second  simulating  the  speed  at  which  a 
spacecraft  travels  In  geosynchronous  orbit.  After  the  burn,  the 
SRM  is  jettisoned.  A dip  through  the  Earth's  upper  atmosphere 
is  expected  to  slow  the  AFE  so  it  can  rendezvous  with  and  be 
retrieved  by  the  Shuttle.  Back  in  the  cargo  bay.  the  AFE  will  be 
returned  to  Earth  for  in  depth  analysis. 


Ticture  8 - Aero-Assist  Flight  Experiment 


CONCLUSIONS 

The  advances  in  workstations  and  real 
time  Unix  have  enabled  small 
programming  teams  to  implement  real 
time  telemetry  systems  that  have  made 
major  improvements  in  NASA  space  and 
aeronautics  mission  operations.  Several 
real  time  adjustments  must  be  made  to 
Unix  and  applications  properly 
structured  to  meet  ard  and  soft  real  time 
demands.  Many  monitoring  problems 
are  actually  soft  real  time  problems  and 
thus  can  be  implemented  using  current 
workstations  and  expert  system 
technology.  New  techniques  in  data 
acquisition  have  been  developed  to 
ensure  that  the  correctness  of  the  expert 
system  recommendations  is  not  affected 
by  the  data  acquisition  process.  These 
mechanisms  are  general  and  can  be 
applied  to  any  real  time  expert  system 
Although,  these  techniques  are  more 
traditionally  associated  with  real  time 
systems  or  process  control  rather  than 
expert  systems,  they  must  be  applied  for 
real  time  expert  systems  to  provide 
useful  information  in  mission  critical 
environments. 
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with  the  first  version  of  the  DMA  driver. 
The  development  of  the  X-29  system 
was  performed  by  Dale  Mackali, 
Dorothea  Cohen,  and  Dick  Simon  from 
NASA's  Ames-Dryden  Flight  Research 
Facility.  The  F-1 5 STOL  system  was 
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developed  by  a team  headed  by  Robin 
Madison  of  tne  Air  Force  Flight  Test 
Center.  Funding  for  RTDS  was  provided 
by  NASA's  Office  of  Aeronautics  and 
Exploration  Technology,  The  Space 
Shuttle  Advanced  Development  Effort 
and  the  Space  Station  Freedom 
Advanced  Development  Program. 

The  United  States  Government  does  not 
endorse  any  products  and  mention  of 
products  in  this  article  does  not 
constitute  an  endorsement  by  the 
United  States  Government. 
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FURTHER  INVESTIGATION  TRACED  PROBLEM  TO  A FAILED 
WIDE-BAND  INTERFACE  UNIT  IN  VGR  DACS 

- SHARP  USED  TO  CONFIRM  PROBLEM  RESOLUTION  AFTER  THE  FAILED  UNIT 
WAS  REPLACED 
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- SUFFICIENT  TOOLS  ARE  AVAILABLE  BUT  SKILLED  DEVELOPERS  ARE  REQUIRED 
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Safety  features 
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Space  Station  Freedom  Payload  Operations  Integration  Center  (POIC) 
SSF  Work  Package  01  ESC 

SSF  OSSA  Integrated  Science  Operations  Center  (ISOC) 

Astronomical  X-ray  Astrophysics  Facility  (AXAF)  POCC 
AXAFESC 


HOSC  GENERIC  SYSTEM  GOALS 
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To  allow  for  expansion  and  accommodation  of  new  missions 

To  use  common  data  transfer  protocols  across  projects,  simplifying  data 
exchange  and  eliminating  need  for  protocol  conversion 


o OM1S/PM1S 
o Mission  Planning 

Page  10  o Verification  Services  DRAFT 


CURRENT  HOSC  MISSION  REQUIREMENTS 
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process  Orbiter  Downlink 

process  IUS  subset  data  inserted  into  OD  by  payload  data  interleave 
process  data  from  ARIA  aircraft  or  other  sources 


CURRENTLY  EMPLOYED  HARDWARE  AND  SOFTWARE 
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Communications:  Electrospace  digital  audio.  Image  Video  video  matrix, 
dual  9"  B&W  and  single  13"  color  NTSC  monitors  at  each  console 


FRONT  END  PROCESSING 
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All  other  acquisition  and  processing  performed  by  Central  Processor, 
with  frame  sync  performed  by  custom  input  board 


CENTRAL  PROCESSING 
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PERIPHERAL  PROCESSORS 


• • 
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Peripheral  Processors  perform  data  calibration  and  formatting,  sense  limits 
and  highlight  limits  exceeded,  drive  displays,  and  execute  special  comps 

Up  to  4 displays  per  processor 


COMMUNICATIONS 
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Audio  keysets  provide  2-way  internal  and  external  audio,  and  access  to  telecom 
— Remote  keysets  possible  using  fractional  T1  circuits 

Video  used  primarily  for  display  sharing  and  mission  status 
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New  interface  requirements  — NASCOM  II,  external  users 


ENHANCED  DEVELOPMENT  GOALS 
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HOSC  Enhanced  Architecture 


FRONT  END  PROCESSING 
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FEP  acquires  and  preprocesses  all  data;  also  performs  command  processing 
Raw  telemetry  sent  directly  to  workstations  in  packet  form 


WORKSTATIONS 
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SYSTEM  SERVICES 
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INTEGRATED  SYSTEM  MONITOR  AND  CONTROL 
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ENHANCED  DEVELOPMENT  SCHEDULE 
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Software 

• Mostly  Assembly  Language 
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• Software 

• Unix,  C Language,  X-Windows,  MOTIF,  G2  Expert  System  Tool 
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RTDS  Technology  Deployment  1990-1991 
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RTDS  will  run  on  almost  any  Unix  workstation 
• Makes  GAO  very  happy! 
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effect  on  science  objectives 
Simple  interfaces  between  elements 

Project  Management  supportive  of  new  operations  approaches 


Technical  and  Non-Technical  Features  of 
SME  Control  Center  — 
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Common  tools  implemented 

These  tools  duplicated  for  use  in  multiple  elements 
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General  Tasks  & Objects 
Within  SSF  Ground  System  Nodes 
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Level  of  Commonality 
(by  a grass  roots  evaluation) 
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Sometimes 
Hardly  ever 


Technical  and  Non-Technical  Features  of 
SME  Control  Center  — 
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Early  and  full  access  to  capabilities  of  full  operations  system 
Benefits  in  cost,  schedule,  reliability,  and  usability 


Continuity  Between  Phases  of  SME  Project  Lifecycle 

is  Maintained 
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PLANNING  — ► ■ CONTROL  NASA 

ANALYSIS—  CENTER  COMMUNICATIONS  SATELLITE 


Technical  and  Non-Technical  Features  of 
SME  Control  Center  — 
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Predictable,  routine,  repeated,  computational,  critical,  or 
potentially  hazardous 

But  wanted  ability  to  monitor  most  activities 
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SME  Control  Center  and  OASIS:  Lessons  Learned 
Can  These  Features  be  Applied  to  Other  Missions? 
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• Supportive  of  change 

. Integrated  Design/Systems  Design  • Yes!  Seen  as  a major 

deficiency  in  current  missions 


. Common  Tools  for  Common  Functions  • Yes,  a major  opportunity  for 
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work  environment 


OASIS  Realtime  Control  and  Monitoring  Package 
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Coded  in  Ada 


OASIS  is  Useful  Throughout  the  Project  Lifecycle 
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How  OASIS  is  Organized 
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OASIS  — Planning  and  Scheduling  Packaqe 
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Application  driven  communications  protocol 
Coded  in  Ada 


OASIS-PS  Architecture 
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A PROTOTYPING  EFFORT  IS  IN  WORK  TO  ADVANCE  SPoC  CONCEPTS 
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Demonstrate  background  display  updates 

Demonstrate  advanced  earth  observation  (EOBS)  capabilities 

Demonstrate  accurate  maneuver  and  aero  drag  modeling 


MacSPOC  RESULTS  ARE  ENCOURAGING 
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ONBOARD  PORTABLE  COMPUTING  IS  COMING  OF  AGE 
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- Demonstrate  real  time  man-in-the-loop  capability 

- Provide  piloting  practice  during  extended  duration  flights 


EFFICIENT  DATA  ENTRY 
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BACKGROUND  DISPLAY  UPDATES 
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ADVANCED  EARTH  OBSERVATION  CAPABILITIES 
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ACCURATE  MANEUVER  AND  AERO  DRAG  MODELING 
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PRECEDING  PAGE  BLANK  NOT  FILMED 
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Technology  Overview 
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Distributed  Planning  & Scheduling 
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• Facilitate  portability  of  applications  across  graphic  workstations 


T AE's  Software  Arch  itectu  re  Tech?°l09ies 
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Development  Benchmark 
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- complexity 

- number  of  people  ($expensive) 

- number  of  interfaces  (translation  errors) 

- results  in  ONE  expert  system  application 

- difficult  to  modify  or  extend 


Benefits  of  GenSAA 
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Spiral  Model  of  ESDM 
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Resource  effective  (cost,  time)  development  of  quality  s/w 


0) 

<A 


04 

<1) 

W 


527 


High  Performance 
VLSI  Telemetry  Systems 
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real-time  software  environment 

[ "Functional  Component  Approach"] 

- A low-cost  "mission  specific"  ground  telemetry  system  can  be  created 
by  selecting  appropriate  standard  hardware  components  and  configuring 
them  with  modular  software  components  in  an  open  bus  environment  * 
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Ground  Operations 
Technology  Testbed  (GOTT) 
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Approach: 

Develop  a suite  of  tools  needed  to  support  POCC-based 
technology  experiments 


The  GOTT  as  a Testbed  Tech"°l0fll9S 
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Reuse  of  past  experiment  data 
Data  analyses  and  report  generation 
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The  Generic  Spacecraft  Analyst  Assistant  (GenSAA): 
A Tool  for  Automating  Spacecraft  Monitoring 
with  Expert  Systems 


Peter  M Hughes 

NASA! Goddard  Space  Flight  Center 

Edward  C.  Luczak 

Computer  Sciences  Corporation 


Abstract 

Flight  Operations  Analysts  (FOAs)  in  the  Payload  Operations  Control  Center  (POCC)  are 
responsible  for  monitoring  a satellite’s  health  and  safety.  These  analysts  closely  monitor  real 
time  data  looking  for  combinations  of  telemetry  parameter  values,  trends,  and  other  indications 
that  may  signify  a problem  or  failure.  As  satellites  become  more  complex  and  data  rates  increase, 
FOAs  are  quickly  approaching  a level  of  information  saturation. 

The  FOAs  in  the  spacecraft  control  center  for  the  COBE  (Cosmic  Background  Explorer)  satellite 
are  currently  using  a fault-isolation  expert  system  named  the  Communications  Link  Expert 
Assistance  Resource  (CLEAR),  to  assist  in  isolating  and  correcting  communications  link  faults. 
Due  to  the  success  of  CLEAR  and  several  other  systems  in  the  control  center  domain,  many  other 
monitoring  and  fault-isolation  expert  systems  will  likely  be  developed  to  support  control  center 
operations  during  the  early  1990s. 

To  facilitate  the  development  of  these  systems,  a project  has  been  initiated  to  develop  a 
domain-specific  tool,  named  the  Generic  Spacecraft  Analyst  Assistant  (GenSAA).  GenSAA  will 
enable  spacecraft  analysts  to  easily  build  simple  real-time  expert  systems  that  perform  spacecraft 
monitoring  and  fault  isolation  functions.  Expert  systems  built  using  GenSAA  will  assist 
spacecraft  analysts  during  real-time  operations  in  spacecraft  control  centers. 

This  paper  describes  lessons  learned  during  the  development  of  several  expert  systems  at 
Goddard,  thereby  establishing  the  foundation  of  GenSAA’ s objectives  and  offering  insights  on  how 
problems  may  be  avoided  in  future  projects.  This  will  be  followed  by  a description  of  the 
capabilities,  architecture,  and  usage  of  GenSAA  along  with  a discussion  of  its  application  to 
future  NASA  missions. 


Originally  Published  in  the  Conference  Proceedings  from  The  1991  Goddard  Conference  on  Space  Applications 
of  Artificial  Intelligence,  NASA  Goddard  Space  Right  Center,  Greenbelt,  MD,  May  14-15,  1991. 
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The  Generic  Spacecraft  Analyst  Assistant  (GenSAA) 
A Tool  for  Automating  Spacecraft  Monitoring 
with  Expert  Systems 


Peter  M.  Hughes 

NASA! Goddard  Space  Flight  Center 

Edward  C.  Luczak 

Computer  Sciences  Corporation 


Abstract 

Flight  Operations  Analysts  (FOAs)  in  the 
Payload  Operations  Control  Center  (POCC)  are 
responsible  for  monitoring  a satellite’s  health 
and  safety.  These  analysts  closely  monitor  real 
time  data  looking  for  combinations  of  telemetry 
parameter  values,  trends,  and  other  indications 
that  may  signify  a problem  or  failure.  As 
satellites  become  more  complex  and  data  rates 
increase,  FOAs  are  quickly  approaching  a level 
of  information  saturation. 

The  FOAs  in  the  spacecraft  control  center  for 
the  COBE  (Cosmic  Background  Explorer) 
satellite  are  currently  using  a fault-isolation 
expert  system  named  the  Communications  Link 
Expert  Assistance  Resource  (CLEAR),  to  assist 
in  isolating  and  correcting  communications  link 
faults.  Due  to  the  success  of  CLEAR  and  several 
other  systems  in  the  control  center  domain, 
many  other  monitoring  and  fault-isolation 
expert  systems  will  likely  be  developed  to 
support  control  center  operations  during  the 
early  1990s. 

To  facilitate  the  development  of  these  systems,  a 
project  has  been  initiated  to  develop  a 
domain-specific  tool,  named  the  Generic  Space- 
craft Analyst  Assistant  (GenSAA).  GenSAA  will 
enable  spacecraft  analysts  to  easily  build  simple 
real-time  expert  systems  that  perform 
spacecraft  monitoring  and  fault  isolation 
functions.  Expert  systems  built  using  GenSAA 
will  assist  spacecraft  analysts  during  real-time 
operations  in  spacecraft  control  centers. 

This  paper  describes  lessons  learned  during  the 
development  of  several  expert  systems  at 
Goddard,  thereby  establishing  the  foundation  of 
GenSAA’s  objectives  and  offering  insights  on 


how  problems  may  be  avoided  in  future  projects. 
This  will  be  followed  by  a description  of  the 
capabilities,  architecture,  and  usage  of  GenSAA 
along  with  a discussion  of  its  application  to 
future  NASA  missions. 


Introduction 

NASA’s  Earth -orbiting  scientific  satellites  are 
becoming  increasingly  sophisticated.  They  are 
operated  by  highly  trained  personnel  in  the 
mission’s  Payload  Operations  Control  Center 
(POCC).  Currently  at  the  Goddard  Space  Flight 
Center  (GSFC),  missions  utilize  either  a 
dedicated  control  center  (e.g.  LANDSAT  and  the 
Hubble  Space  Telescope)  or  share  resources  in 
the  Multi-Satellite  Operations  Control  Center 
(e.g.  Cosmic  Background  Explorer  and  the 
Gamma  Ray  Observatory),  In  either  case, 
POCC  personnel  called  Flight  Operations 
Analysts  (FOAs),  are  responsible  for  the  proper 
command,  control,  health,  and  safety  of  the 
satellite. 

The  satellite  control  centers  operate  round-the- 
clock  throughout  the  lifetime  of  the  spacecraft. 
There  are  typically  multiple  real-time 
communications  events  daily  with  each 
satellite.  During  these  events,  the  FOAs  must: 

- establish  and  maintain  the  telecommunica- 
tions link  with  the  spacecraft, 

- monitor  the  spacecraft’s  health  and  safety, 

- send  commands  or  command  loads  to  the 
satellite  for  on-board  execution, 

- oversee  the  transfer  of  the  scientific  data 
from  the  on-board  tape  recorders  to  ground 
systems  for  processing  and  analysis,  and 

- manage  spacecraft  resources  (including  on- 
board memory,  batteries,  and  tape 
recorders). 
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To  accomplish  these  activities,  the  analyst  must 
thoroughly  understand  the  operation  of  the 
spacecraft  and  ground  systems  and  continuously 
monitor  the  current  state  of  operations  as 
indicated  by  telemetry  parameters  displayed  on 
the  POCC  consoles.  During  an  event,  the 
analyst  typically  monitors  hundreds  of  telemetry 
parameter  values  on  multiple  display  pages  that 
may  be  updating  several  times  per  second. 
Monitoring  the  operation  of  these  satellites  is  a 
demanding,  tedious  task  that  requires 
well-trained  individuals  who  are  quick-thinking 
and  composed  under  pressure. 

As  satellites  become  more  complex,  they  become 
more  difficult  to  operate.  FOAs  are  reaching  a 
level  of  information  saturation  as  more  and 
more  data  must  be  monitored  and  analyzed 
during  real-time  supports.  Large  volumes  of 
low-level  information  can  overwhelm  analysts 
and  disrupt  their  ability  to  identify  and  resolve 
conflicting  constraints.  Human  operators  may 
soon  be  unable  to  consistently  monitor  all  of  the 
information  available.  The  need  to  automate 
some  data  monitoring  functions  is  apparent. 

Expert  system  technology  is  proving  to  be 
effective  in  automating  some  spacecraft 
monitoring  functions.  This  paper  first 
summarizes  CLEAR,  the  first  spacecraft 
monitoring  expert  system  deployed  at  GSFC. 
The  paper  then  reviews  several  lessons  learned 
from  CLEAR  and  other  monitoring  and  fault 
isolation  expert  system  projects  undertaken  at 
GSFC.  Finally,  the  paper  describes  the  Generic 
Spacecraft  Analyst  Assistant  (GenSAA),  a tool 
that  will  facilitate  the  development  of  future 
spacecraft  monitoring  expert  systems.  GenSAA 
has  been  defined  based  on  the  lessons  learned 
from  CLEAR  and  other  expert  system  projects  at 
GSFC. 

Initial  Work:  The  CLEAR  System 

The  Communications  Link  Expert  Assistance 
Resource  (CLEAR)  is  the  first  operational  expert 
system  at  GSFC  that  automates  one  of  the 
spacecraft  analyst's  tasks  (Hughes  & Hull, 
1987).  CLEAR  is  a fault-isolation  expert  system 
that  supports  real-time  operations  in  the  POCC 
for  the  Cosmic  Background  Explorer  (COBE) 
mission.  This  system  monitors  the  communica- 
tions link  between  COBE  and  the  Tracking  and 
Data  Relay  Satellite  (TDRS),  alerts  the  analyst 


to  any  problems,  and  offers  advice  on  how  to 
correct  them. 

CLEAR  is  a forward  chaining,  rule-based  system 
that  operates  in  the  COBE  POCC.  It  monitors 
over  100  real-time  performance  parameters  that 
represent  the  condition  and  operation  of  the 
spacecraft’s  communications  with  the  relay 
satellite.  Using  this  information,  together  with 
knowledge  of  TDRS  operations,  COBE’s 
on-board  communications  system  and  the 
expected  configuration  of  the  scheduled  event, 
CLEAR  accurately  portrays  the  status  of  the 
communications  link. 

Textual  and  graphical  information  about  the 
condition  of  the  COBE/TDRS/ground 
communications  links  is  displayed  in  a 
tiled-window  format.  A graphics  window 
displays  the  elements  of  the  communications 
network  from  the  COBE  Spacecraft  to  the 
POCC;  green  lines  represent  healthy  links 
between  elements.  When  the  performance 
parameters  indicate  that  a communications  link 
or  processing  system  is  degrading  or  down,  the 
associated  line  or  icon  turns  yellow  or  red, 
respectively.  The  display  enables  analysts  to 
assess  the  current  status  of  the  communications 
event  in  a quick  glance. 

When  CLEAR  isolates  a problem,  a short 
description  of  the  problem  is  displayed  in  a 
“problems”  window.  If  multiple  problems  are 
found,  the  problem  descriptions  are  ranked  and 
displayed  in  descending  order  of  criticality. 
CLEAR  suggests  analyst  actions  to  correct  the 
problem;  however,  the  system  does  not  take  any 
corrective  action  itself. 

To  further  assist  the  analyst  and  to  provide 
support  for  its  advice,  the  CLEAR  system 
provides  an  explanation  facility.  When  the 
analyst  selects  a problem  displayed  in  the 
problems  window,  CLEAR  provides  a detailed 
explanation  of  why  the  expert  system  believes 
that  the  problem  exists. 

CLEAR  has  approximately  165  rules  and 
isolates  approximately  75  different  problems. 
The  types  of  problems  include:  non-reception  of 
data  within  the  control  center  (system  or 
communication  problems,  or  data  reporting  not 
activated);  misconfigurations  between  the  COBE 
POCC  and  the  TDRS  ground  station 
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(coherency/non-coherency,  doppler  compensation 
on/off,  power  mode,  actual  TDRS  in  use, 
antennae  configurations);  discrepancies  in 
telemetry  rate  or  format;  inactive  or  non-locked 
links;  and  degrading  or  critical  signal  strength 
situations  (Perkins  & Truszkowski,  1990). 

CLEAR  operates  on  any  of  the  seven 
PC/AT-class  workstations  that  are  used  for 
console  operations  in  the  POCC.  It  is  written  in 
the  'Cf  language  and  uses  the  TC’  Language 
Integrated  Production  System  (CLIPS)  and  a 
custom-developed  graphics  library. 

The  CLEAR  Expert  System  has  supported  the 
COBE  Flight  Operations  Team  since  launch  in 
November  1989.  It  is  used  to  monitor  nearly  all 
of  the  TDRS  supports  (COBE  occasionally 
communicates  directly  to  the  Wallops  ground 
station)  and  is  regarded  as  the  fault-isolation 
“expert”  for  the  COBE/TDRS  telecommunica- 
tions link.  CLEAR  represents  a successful 
attempt  to  automate  a control  center  function 
using  an  expert  system.  Several  other  missions 
have  requested  to  use  it  and,  at  the  time  of  this 
writing,  efforts  are  underway  to  adapt  it  to 
support  the  Gamma  Ray  Observatory  mission 
which  is  scheduled  for  launch  aboard  the  shuttle 
in  Spring  1991. 

Lessons  Learned 

Several  important  lessons  have  been  learned 
from  the  experience  gained  in  developing  and 
operating  CLEAR.  Key  lessons  have  also  been 
learned  from  other  monitoring  and  fault 
isolation  expert  systems  developed  recently  at 
GSFC,  including  the  Ranging  Equipment 
Diagnostic  Expert  System  (REDEX)  (Luczak,  et. 
al.,  1989),  and  other  systems.  These  lessons 
learned  have  strongly  influenced  the  definition 
of  GenSAA. 

• Production  rules  effectively  represent 
analysts’  knowledge  for  automating 
fault-isolation  in  spacecraft  operation.  The 
rule-based  method  of  knowledge  representation 
has  proven  to  be  quite  powerful  for 
fault-isolation  in  spacecraft  operations. 
Production  rules  provide  a direct  method  of 
encoding  the  fault-isolation  knowledge  of 
spacecraft  analysts;  the  if-then  structure  closely 
parallels  the  stimulus-response  behavior  that 
they  develop  through  extensive  training.  This 


knowledge  can  be  translated  smoothly  into  rule 
form.  The  development  of  CLEAR  would  have 
taken  much  longer  using  conventional, 
non -rule-based  programming  techniques. 

• Knowledge  engineering  is  an  iterative, 
time-consuming  process.  Early  in  CLEAR’s 
development,  the  primary  concern  was  the 
perceived  difficulty  of  the  knowledge  acquisition 
effort.  However,  the  knowledge  engineering 
task  was  found  to  be  relatively  straightforward, 
albeit  time-consuming.  The  development  of  the 
rule  base  was  a lengthy  process  due  to  the 
interactive  nature  of  the  knowledge  acquisition. 
Basically,  the  expert  would  describe  a specific 
piece  of  knowledge  to  the  “knowledge  engineer” 
who  would  attempt  to  transcribe  it  into  a rule 
and  pass  it  back  to  the  expert  for  validation. 
When  the  rule  accurately  represented  the  piece 
of  knowledge  (which  usually  took  multiple 
iterations  between  the  expert  and  the  knowledge 
engineer),  it  was  passed  to  the  test  team  for 
formal  testing,  and  then,  finally,  released  for 
operational  use. 

The  involvement  of  various  players  in  this 
process  resulted  in  long  turnaround  times  from 
the  point  at  which  a piece  of  knowledge  was 
determined  to  be  important  until  it  was 
translated  into  a rule  and  placed  into  operation. 

• Allow  the  domain  expert  to  participate  in 
the  rule  formation.  The  CLEAR  development 
team  learned  that  the  knowledge  structure  of 
the  fault-isolation  process  employed  by  the 
FOAs  is  shallow  (i.e.  the  identification  of  a 
problem  generally  does  not  rely  on  the 
identification  of  other  subproblems,  and  so  on). 
Most  of  the  problems  identified  by  the  analysts 
were  discrete  problems  that  seldom  overlapped 
other  problems.  Conflicts  between  rules  were 
minimal;  this  simplified  testing,  verification, 
and  validation  of  the  rulebase. 

The  participation  of  the  analyst  in  knowledge 
acquisition  and  translation  has  many 
advantages.  First,  it  can  reduce  the  knowledge 
translation  time  and,  more  importantly,  reduce 
knowledge  translation  errors  that  occur  when  a 
knowledge  engineer  formulates  rules  based  on 
the  knowledge  extracted  from  documentation  or 
interviews  with  the  domain  expert.  Second,  the 
verification  and  validation  of  the  knowledge  will 
be  facilitated  since  the  expert  will  better 
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comprehend  the  rulebase.  Third,  the  in-depth 
understanding  of  the  knowledge  base  and  its 
capabilities  is  likely  to  result  in  a higher  degree 
of  user  confidence  in  the  system  thereby 
ensuring  user  acceptance. 

• Expect  to  fine-tune  the  expert  system 
after  it  becomes  operational.  For  CLEAR, 
the  rule-based  method  of  knowledge 
representation  has  provided  the  flexibility  to 
easily  adapt  the  knowledge  base  to  unforeseen 
changes  in  the  operational  behavior  of  the 
spacecraft.  For  example,  even  though  the 
operational  nature  of  COBE  was  fairly 
accurately  understood  by  the  design  engineers 
and  flight  operations  team  before  the  launch, 
slight  behavioral  variations  and  complications 
arose  once  the  spacecraft  was  in  orbit.  Although 
the  FOAs  were  able  to  adjust  to  such  variations 
quickly,  some  of  the  ground  systems  required 
complex  software  modifications.  However,  the 
changes  required  to  CLEARS  rule-base  were 
simple  and  quickly  implemented.  After 
modification,  CLEAR  provided  consistent 
operational  assistance.  It  is  important  to 
provide  the  capability  to  modify  an  operational 
expert  system  in  a controlled,  yet  straightfor- 
ward way. 

• Don’t  underestimate  the  integration 
process.  One  of  the  most  valuable  lessons 
learned  is  that  while  prototypes  can  often  be 
developed  rapidly,  operational  expert  systems 
require  considerable  effort.  A major  factor  in 
this  effort  is  the  difficulty  of  interfacing  the 
expert  system  to  the  data  source. 

The  CLEAR  development  team  learned  that 
most  of  the  development  time  for  the  operational 
system  was  spent  on  issues  not  directly  related 
to  the  construction  of  the  knowledge  base.  A 
surprising  amount  of  effort  focused  on  the 
integration  of  the  expert  system  with  the  data 
source  and  graphics  display  system.  This 
required  in-depth  programming  knowledge  of 
the  interfacing  systems  and  the  ability  to 
troubleshoot  problems  within  them.  Provide 
tools  to  simplify  the  complicated  task  of 
integrating  the  expert  system  with  the  interfac- 
ing systems  and,  if  possible,  reuse  any  interface 
code  developed  for  a similar  (expert)  system. 

• Don’t  neglect  the  user-interface.  The 
human -computer  interface  is  frequently  the 


most  underdeveloped  component  of  an  expert 
system.  An  effective  user  interface  is  inviting, 
comprehensible,  credible,  and  simple  to  operate. 
To  make  it  inviting,  simplify  the  display  layout 
and  present  only  that  information  needed  to 
efficiently  perform  the  task.  Graphics  can 
greatly  enhance  the  visual  communications  of  a 
system;  capitalize  on  their  expressive  power  to 
provide  system  output  that  can  be  assimilated 
quickly  and  accurately. 

The  following  lessons  are  also  related  to  the  use 
of  graphical  user  interfaces: 

- Use  colors  prudently  and  consistently. 
Although  often  misused,  colors  are  valuable  for 
emphasizing  or  coding  information.  Use  them 
sparingly  and  in  a manner  consistent  with  other 
systems  or  conventions  employed  in  the  targeted 
operational  environment. 

- Include  a graphical  user-interface  (even 
in  the  first  expert  system  prototype.) 
CLEAR  utilized  a graphical  user  interface  in  the 
initial  prototype  to  demonstrate  the  capabilities 
of  the  proposed  expert  system;  this  elicited 
valuable  feedback  from  the  expert  and  other 
FOAs.  In  contrast,  a non-graphical 
user-interface  was  used  in  the  initial  REDEX 
prototype;  as  a result,  user  interest  and 
feedback  was  limited  early  in  the  project 

- Use  an  object-oriented  diagram  editor  to 
ease  diagram  creation  and  maintenance. 
Ideally,  the  diagram  editor  should  enable 
diagram  objects  to  be  easily  associated  with 
status  values  and  fault  conditions  inferred  by 
the  expert  system.  In  the  REDEX  project,  a 
diagram  editor  with  only  limited  capability  was 
used,  and  as  a result,  significant  effort  was 
required  to  construct  and  modify  diagrams. 

• Use  block  diagram  displays  to  graphical- 
ly illustrate  the  system  being  monitored. 
Users  have  responded  very  positively  to  the  use 
of  schematic  displays  that  graphically  show 
monitored  system  status  and  fault  locations. 
Analysts  and  technicians  usually  learn  about 
the  systems  they  monitor  by  studying  system 
block  diagrams  in  training  classes  and  reference 
manuals.  By  using  similar  block  diagram 
displays,  a monitoring  expert  system  can 
present  status  to  the  user  in  a familiar  and 
intuitive  format.  Color  coding  of  status 
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conditions  on  such  displays  has  been  found  to  be 
an  effective  way  to  present  succinct  status 
summaries.  For  example,  REDEX  users  have 
been  enthusiastic  about  the  color  block  and 
layout  diagrams  in  that  expert  system;  over  35 
diagrams  graphically  depict  the  functional  and 
physical  structure  of  the  equipment  being 
diagnosed. 

• Make  the  system  easy  to  operate. 

Operation  of  the  expert  system  should  be  simple 
enough  that  the  user  can  concentrate  on  the 
problem,  not  on  how  to  operate  the  system.  The 
following  techniques  were  applied  in  CLEAR 
and  REDEX  to  simplify  operation: 

- Reduce  user  input  to  a minimum,  CLEAR 
operates  in  a highly  autonomous  mode;  no  user 
input  is  required  after  system  initialization. 
CLEAR  has  been  well-accepted  by  its  users, 
partially  because  it  operates  as  an  independent 
intelligent  assistant,  allowing  the  spacecraft 
analyst  to  focus  on  other  responsibilities  during 
real-time  satellite  contacts. 

- Use  hypertext  and  hypergraphic 
techniques*  These  techniques  (Bielawski  & 
Lewand,  1991)  enable  the  expert  system  user  to 
quickly  select  and  display  desired  diagrams  by 
clicking  on  link  buttons  that  appear  on  each 
diagram.  Links  can  be  used  to  create  diagram 
hierarchies,  off-page  connections,  diagram 
sequences,  and  other  structures.  REDEX  uses 
these  techniques  to  enable  users  to  navigate 
through  a set  of  several  dozen  graphical  display 
pages;  they  find  the  approach  intuitive  and  easy 
to  use. 

These  lessons  learned  have  all  influenced  the 
definition  and  development  of  GenSAA. 

GenSAA 

Overview 

GenSAA  is  an  advanced  tool  that  will  enable 
spacecraft  analysts  to  rapidly  build  simple 
real-time  expert  systems  that  perform 
spacecraft  monitoring  and  fault  isolation 
functions.  Expert  systems  built  using  GenSAA 
will  assist  spacecraft  analysts  during  real-time 
operations  in  spacecraft  control  centers. 


Use  of  GenSAA  will  reduce  the  development 
time  and  cost  for  new  expert  system  applications 
in  this  domain.  GenSAA  will  allow  major  expert 
system  software  functions  and  portions  of 
knowledge  bases  to  be  reused  from  mission  to 
mission. 

GenSAA  has  the  following  primary  characteris- 
tics: 

• Easily  used  — The  process  for  developing 
specific  expert  system  applications  using 
GenSAA  will  be  straightforward  enough  that  it 
can  be  performed  by  trained  spacecraft  analysts 
on  the  flight  operations  team. 

• Rule-based  — GenSAA  will  support  the  use 

of  rules  to  represent  spacecraft  and  payload 
monitoring  and  fault  isolation  knowledge. 

Rule-based  representations  are  easily  learned 
and  can  be  used  to  describe  many  of  the 
reasoning  processes  used  by  spacecraft  analysts. 
(An  object  representation  technique  will  be 
included  in  a subsequent  phase.) 

• Highly  graphical  — The  GenSAA  operation- 

al user  interface  will  support  both  textual  and 
graphical  presentations  of  health  and  status 

information  and  fault  isolation  conclusions. 

Hypertext  and  hypergraphic  techniques  will  be 
supported  to  simplify  operational  interaction 
with  GenSAA  expert  systems. 

• Transparently  interfaced  with  TPOCC  — 

GenSAA  will  be  used  to  create  expert  system 
applications  that  will  support  analysts  in 

spacecraft  control  centers  that  use  the  new 
Transportable  Payload  Operations  Control 
Center  (TPOCC)  architecture^  TPOCC  is  a new 
Unix-based  control  center  system  architecture 
that  will  be  used  on  many  new  spacecraft 
missions  at  GSFC.  GenSAA  will  be  adaptable  to 
also  support  non-TPOCC  data  interfaces. 

GenSAA  is  being  defined  and  prototyped  by  the 
Automation  Technology  section  (Code  522.3)  of 
the  Data  Systems  Technology  Division  at  GSFC. 
A system  and  operations  concept  has  been 
defined  (Hughes  & Luczak,  March  1990),  and  a 
multi-phase  prototype  effort  is  underway 
(Hughes  & Luczak,  August  1990). 
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GenSAA  Architecture 

GenSAA  is  a shell,  or  software  framework  for 
developing  spacecraft  control  center  expert 
systems.  It  is  analogous  to  many  commercial 
expert  system  shells  because  it  facilitates  the 
development  of  specific  expert  system 
applications.  However,  GenSAA  is  tailored  to 
the  specific  requirements  of  spacecraft  analyst 
assistant  expert  systems  in  TPOCC  control 
centers.  GenSAA  therefore  shares  many  of 
TPOCC’s  architectural  features. 

The  TPOCC  architecture  is  based  on  distributed 
processing,  industry  standards,  and  commercial 
hardware  and  software  components.  It  employs 
the  client/server  model  of  distributed  processing, 
the  Network  File  System  (NFS)  protocol  for 
transparent  network  access  to  files,  and  the  X 
Window  System  (X.11)  with  the  Motif  library 
and  window  manager  for  the  graphical  operator 
interface.  A TPOCC  configuration  consists  of  a 
small  set  of  specialized  front-end  processors  and 
Unix-based  workstations  on  an  Ethernet 
network  using  the  TCP/IP  network  protocol. 
GenSAA  operates  in  this  environment. 

GenSAA  allows  spacecraft  analysts  to  rapidly 
create  simple  expert  systems  without  having  to 
deal  directly  with  the  complicated  details  of  the 
systems  with  which  the  expert  system  must 
interface.  In  addition,  it  will  allow  the  expert 
system  developer  to  utilize  and/or  modify 


previously  developed  rule  bases  and  system 
components,  thus  facilitating  software  reuse  and 
substantially  reducing  development  time  and 
effort. 

Figure  1 shows  the  six  major  elements  of 
GenSAA.  They  are  divided  into  two  sets:  the 
GenSAA  Workbench  and  the  GenSAA  Runtime 
Environment.  These  are  described  in  the 
sections  below. 

The  GenSAA  Workbench 

The  GenSAA  Workbench  is  composed  of  three 
utilities  that  enable  a spacecraft  analyst  to 
create  a GenSAA  application.  A GenSAA 
application  is  a specific  expert  system  that 
performs  real-time  monitoring  and  fault 
isolation  functions  in  a TPOCC  spacecraft 
control  center. 

A GenSAA  application  is  created  by  defining  the 
application's  runtime  specificiations  using  the 
GenSAA  Workbench.  Figure  2 illustrates  that 
these  specifications,  called  Reusable  Application 
Components,  together  with  the  elements  of  the 
GenSAA  Runtime  Components,  comprise  a 
GenSAA  Application. 

The  GenSAA  Workbench  utilities  are  as  follows: 

• Data  Interface  Development  utility  - This 
utility  is  used  to  create  the  Data  Interface 
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Figure  1 . The  Elements  of  GenSAA 
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Specification  for  a GenSAA  application.  The 
Data  Interface  Specification  defines  three  types 
of  data  that  are  used  by  the  GenSAA  application 
during  real-time  operations: 

- Telemetry  data  - Telemetry  data  variables 
represent  real-time  status  of  the  monitored 
spacecraft  and  related  ground  support  systems. 
(Telemetry  variables  are  sometimes  called 
telemetry  mnemonics.)  Values  for  these 
variables  are  received  and  updated  during 
spacecraft  operation  periods  from  the  TPOCC 
Data  Server  process,  which  is  part  of  the 
TPOCC  software.  Using  the  Data  Interface 
Development  Utility,  the  GenSAA  Workbench 
user  selects  the  telemetry  variables  needed  for 
the  expert  system  being  created  from  a list  of  all 
the  telemetry  variables  available  from  the 
TPOCC  Data  Server.  Values  for  only  those 
variables  selected  will  be  received  by  the  expert 
system  during  run-time. 

- Configuration  data  - Configuration  data 
variables  represent  expected  operating  modes 
and  equipment  configurations.  For  example,  a 
configuration  variable  might  represent  the 
setting  of  a switch  that  determines  which  of  two 
redundant  components  is  to  be  used.  Values  for 
these  variables  are  entered  by  the  spacecraft 
analyst  during  spacecraft  operation  periods. 

- Inferred  data  - Inferred  data  variables 
represent  conclusions  inferred  by  rules  in  the 
rule  base.  For  example,  an  inferred  data 
variable  might  represent  the  health  or  fault 
status  of  a component  in  a spacecraft  subsystem. 
(The  name  of  an  inferred  data  variable  together 
with  its  current  value  is  called  an  inferred  fact.) 
Values  are  assigned  to  these  variables  by  actions 
executed  in  the  “then”  part  of  rules  that  fire. 

• Rule  Base  Development  utility  - This 
utility  is  used  to  create  the  rule  base  for  a 
GenSAA  application.  The  rule  base  is  a set  of 
expert  system  rules  in  “condition-action”  (“if  - 
then”)  format  that  may  infer  new  facts  based  on 
currently  asserted  facts.  The  inference  engine 
controls  the  firing  of  rules  in  the  rule  base 
during  execution  of  the  GenSAA  application. 

During  run-time,  if  all  the  conditions  of  a rule 
are  satisfied,  then  the  rule  fires  and  all  its 
actions  are  performed.  Conditions  can  be 


constructed  using  the  telemetry,  configuration, 
and  inferred  data  variables  specified  with  the 
Data  Interface  Development  Utility.  Actions 
may  include:  asserting/retracting  an  inferred 
fact,  enabling/disabling  a rule  or  ruleset, 
performing  a mathematical  calculation,  and 
displaying  text  messages  on  the  user  interface. 

• User  Interface  Development  utility  - This 
utility  is  used  to  create  the  User  Interface 
Specification  for  a GenSAA  application.  The 
User  Interface  Specification  defines  the  user 
interface  panels  and  the  layout  and  behavior  of 
the  display  items  that  comprise  the  operational 
user  interface  of  the  GenSAA  application.  The 
Workbench  user  can  create  a variety  of  display 
items,  including  graphical  icons,  scrolling  text 
lists,  and  data-driven  objects  such  as  meters, 
gauges,  and  simple  strip  charts.  The  display 
designer  constructs  a panel  by  dragging  display 
items  from  a palette  and  placing  them  wherever 
desired.  Lines  can  be  drawn  using  connector 
items  to  create  block  diagram  displays.  The 
Workbench  user  can  associate  each  display  item 
with  a telemetry,  configuration,  or  inferred  data 
variable,  and  specify  how  changes  in  the  value  of 
the  variable  will  affect  the  presentation  of  the 
item.  Characteristics  of  an  item  presentation 
that  can  change  include  its  color,  the  icon 
displayed,  and  the  position  of  the  dynamic 
portion  of  a data-driven  object.  Simple  drawing 
capabilities  are  provided  to  allow  the  creation  of 
new  graphical  icons.  Any  display  item  can  also 
be  specified  to  be  a hypertext  button;  clicking  on 
such  a button  during  run-time  can  cause  an 
informational  pop-up  window  to  appear,  or 
cause  a new  panel  to  be  displayed. 

The  GenSAA  Workbench  utilities  use  a 
graphical,  point-and-select  method  of  interaction 
to  facilitate  use.  The  utilities  are  also  highly 
inter-operable.  For  example,  when  using  the 
Data  Interface  Development  utility,  the  user 
may  select  a given  telemetry  mnemonic  to  be 
included  in  the  Data  Interface  Specification. 
Later,  when  using  the  Rule  Base  Development 
utility,  the  user  can  easily  access  the  Data 
Interface  Specification  and  to  reference  the 
mnemonic  in  a condition  of  a rule.  Similarly, 
when  using  the  User  Interface  Development 
utility,  the  user  can  again  easily  access  the  Data 
Interface  Specification  when  associating 
telemetry  mnemonics  with  display  objects. 
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In  Figure  2,  the  outputs  of  the  GenSAA 
Workbench  utilities  are  described  as  reusable 
application  components.  These  specifications 
will  be  placed  in  a library  so  that  they  can  be 
reused  in  creating  the  specifications  for  new 
GenSAA  applications.  Operations  like  cut  and 
paste  will  be  available  to  allow  portions  of 
previously  created  specifications  to  be  used  in 
constructing  a new  specification. 

GenSAA  Runtime  Environment 

The  elements  of  the  GenSAA  Runtime 
Environment  are  called  the  GenSAA  Runtime 
Components;  they  are  used  without  change  in 
each  GenSAA  application.  They  control  the 
operation  of  a GenSAA  application  during  its 
execution  in  a TPOCC  control  center.  They  read 
the  Data  Interface  Specification,  Rule  Base,  and 
User  Interface  Specification  files  to  determine 
the  specific  behavior  of  the  GenSAA  application. 
Each  of  the  GenSAA  Runtime  Components  is 
implemented  as  a separate  Unix  process;  they 
communicate  with  one  another  via  shared 
memory  and  message  queues.  Their  functions 
are  as  follows: 

• Data  Interface  - This  component  requests 


telemetry  from  the  TPOCC  Data  Server,  as 
specified  in  the  Data  Interface  Specification.  It 
reformats  the  real-time  data  it  receives  and 
makes  it  available  to  the  Inference  Engine  and 
User  Interface  components.  (It  also  exchanges 
data  with  the  GenSAA  Data  Server,  as  described 
below  in  the  section  Multiple  GenSAA 
Applications.) 

• Inference  Engine  - This  component  controls 
the  firing  of  rules  in  the  rule  base.  A rule  is 
fired  when  all  its  conditions  are  satisfied;  the 
conditions  will  often  involve  the  current  values 
of  telemetry,  configuration,  and  inferred  data 
variables.  Inferred  facts  and  messages  may  be 
sent  to  the  User  Interface  component  and 
displayed  to  the  spacecraft  analyst  as  defined  in 
the  User  Interface  Specification.  NASA's  CLIPS 
inference  engine  forms  the  core  of  this 
component. 

• User  Interface  - This  component  manages 
the  user  interface  of  the  GenSAA  Application.  It 
displays  user  interface  panels  that  contain  both 
text  and  graphics.  Color  is  used  to  enhance  the 
display  of  state  data.  Data-driven  display 
objects  are  associated  with  telemetry  values 
received  from  the  TPOCC  data  server  and 
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Figure  3.  A GenSAA  Expert  System  Application  in  operation 


inferred  facts  and  conclusions  received  from  the 
Inference  Engine.  In  response  to  user  inputs 
that  include  hypertext  button  events,  the  User 
Interface  displays  selected  display  panels,  help 
text,  and  other  informational  text  The  user 
interface  panels,  data-driven  objects,  and 
interaction  objects  are  defined  in  the  User 
Interface  Specification  that  was  generated  by 
the  GenSAA  User  Interface  Development  utility. 

Figure  3 shows  a completed  GenSAA  expert 
system  application  in  operation.  GenSAA  expert 
systems  will  run  on  Unix  workstations  using  the 
X Window  System.  The  operational  interface 
with  the  spacecraft  analyst  will  typically  include 
color  block  diagrams  and  animated  data-driven 
objects  (such  as  rotating  meters,  sliding  bar 
graphs,  and  toggle  switches)  that  graphically 
display  the  dynamic  values  of  telemetry  data, 
configuration  data,  and  inferred  conditions.  The 
user  interface  will  also  typically  contain 
hypertext  and  hypergraphic  links  to  make  it 
easy  for  the  spacecraft  analyst  to  quickly  select 
desired  display  panels.  The  GenSAA 
Workbench  supports  the  creation  of  these 
interface  features. 


Multiple  GenSAA  Applications 

GenSAA  applications  are  intended  to  be 
relatively  simple  expert  systems  with  small  rule 
bases  that  are  typically  developed  by  a single 
analyst.  For  example,  a GenSAA  application 
might  monitor  and  isolate  faults  for  one 
subsystem  on  board  a spacecraft.  To  handle 
more  complex  monitoring  situations,  involving 
for  example  several  spacecraft  subsystems, 
multiple  GenSAA  applications  can  be  built  and 
executed  concurrently.  Each  GenSAA 
application  would  be  allocated  one  portion  of  the 
monitoring  task,  and  share  key  conclusions  with 
one  another. 

A fourth  component  of  the  GenSAA  Runtime 
Environment,  the  GenSAA  Data  Server,  is  used 
to  enable  multiple  GenSAA  applications  to 
exchange  data.  As  shown  in  Figure  4,  the 
GenSAA  Data  Server  is  a Unix  process  that  can 
receive  a real-time  stream  of  configuration  and 
inferred  data  variable  updates  from  any 
GenSAA  application.  The  GenSAA  Data  Server 
distributes  the  data  to  any  GenSAA  application 
that  has  requested  it.  A given  GenSAA 


Figure  4.  Sharing  data  among  multiple 
GenSAA  Applications 


application  only  receives  those  variables  it  has 
specifically  requested.  The  data  received  by  a 
GenSAA  application  from  the  GenSAA  Data 
Server  is  called  externally  generated  GenSAA 
(EGG)  data.  A GenSAA  application  receives 
EGG  data  via  its  Data  Interface  component  in 
exactly  the  same  way  as  it  receives  telemetry 
data  from  the  TPOCC  Data  Server. 

Within  a GenSAA  application,  EGG  data  can  be 
used  in  the  conditions  of  rules,  and  can  be 
associated  with  display  items  in  exactly  the 
same  way  as  telemetry,  configuration,  and 
inferred  data.  The  Workbench  supports  the 
specification  of  EGG  data  as  a fourth  variable 
type.  The  Workbench  also  allows  any  local 
configuration  or  inferred  data  to  be  specified  as 
public,  to  cause  it  to  be  sent  to  the  GenSAA  Data 
Server,  and  thereby  shared  with  other  GenSAA 
applications. 

Benefits  of  GenSAA 

The  following  benefits  are  expected  to  be 
realized  by  using  GenSAA  to  build  spacecraft 
monitoring  expert  systems  for  future  NASA 
missions: 

• Assists  the  FOAs  with  data  monitoring — 
FOAs  monitor  real  time  data  looking  for 
combinations  of  telemetry  parameter  values, 
trends,  and  other  indications  that  may  signify  a 
problem  with  the  satellite  or  its  instruments. 
The  expert  systems  created  with  GenSAA  will 
assist  the  FOAs  with  the  tedious  task  of  data 
monitoring  and  allow  them  to  focus  on  other, 


higher-level  responsibilities  during  real-time 
contacts  with  the  satellite.  This,  in  turn,  will 
likely  result  in  more  efficient  and  effective 
operations. 

• Reduces  development  time  and  effort; 
allows  quicker  response  to  necessary 
modifications  — The  behavior  of  an  orbiting 
satellite  is  quite  dynamic  and  occasionally 
different  than  anticipated.  To  quickly  create  or 
modify  expert  systems  that  can  effectively 
monitor  satellites,  tools  are  needed  that  allow 
analysts  to  formulate  rulebases  easily  without 
the  intervention  or  delay  of  knowledge  engineers 
and  programmers.  Several  benefits  are  expected 
by  eliminating  these  traditional  developers. 
Analysts  will  be  able  to  create  rules  quickly  in 
response  to  unforeseen  changes  in  spacecraft 
behavior  or  operational  procedures.  Also, 
knowledge  translation  errors  will  be  reduced  or, 
at  least,  more  easily  corrected.  Knowledge 
translation  errors  are  errors  which  are 
inadvertently  introduced  during  the  process  of 
translating  a piece  of  expert  knowledge  into  rule 
form. 

• Serves  as  a training  tool  — In  addition  to 
assisting  the  FOAs  with  real-time  spacecraft 
operations,  GenSAA  will  be  useful  as  a training 
tool  in  two  ways.  First,  by  utilizing  the  playback 
utilities  provided  by  TPOCC,  analysts  will  be 
able  to  replay  a previous  spacecraft  communica- 
tions event.  Thus,  a student  analyst  can  observe 
how  the  expert  system  handles  a specific 
problem  scenario.  Exercises  like  this  will 
provide  a realistic,  hands-on  environment  for 
training  FOAs  in  a safe,  off-line  mode.  Second, 
experience  from  previous  expert  system  projects 
indicates  that  the  development  of  rules  used  in 
an  expert  system  is  a beneficial  mental  training 
exercise  for  the  FOA.  When  FOAs  create  rules 
themselves,  they  must  consider  alternatives 
more  closely  and  may  therefore  develop  a deeper 
understanding  of  the  problem  domain.  This 
approach  may  enable  more  effective  fault 
isolation  methods  to  be  identified. 

• Protects  against  loss  of  expertise  — 
Another  benefit  of  automating  fault-isolation 
tasks  with  rule-based  systems  is  that  the 
resulting  rulebase  serves  as  accurate 
documentation  of  the  fault-isolation  method.  The 
rulebase  can  be  studied  by  student  analysts  to 
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learn  about  fault-isolation  techniques.  Even 
more  importantly,  mission  operations  can  be 
better  protected  against  the  effects  of  personnel 
turnovers.  POCC  expert  systems  that  capture 
fault-isolation  knowledge  preserve  expertise 
from  mission  to  mission  and  mitigate  the  impact 
of  the  loss  of  experienced  FOAs. 

GenSAA  is  well  suited  for  use  on  spacecraft 
projects  that  involve  a series  of  similar  but 
nonidentical  missions  such  as  NASA’s  Small 
Explorer  (SMEX)  and  International  Solar- 
Terrestrial  Physics  (ISTP)  programs. 

Conclusion 

As  satellites  become  more  complex,  their 
operation  is  becoming  increasingly  difficult. 
FOAs  who  are  responsible  for  the  command, 
control,  health,  and  safety  of  these  spacecraft 
must  monitor  increasing  volumes  of  data,  and 
are  quickly  reaching  a level  of  information 
saturation.  As  demonstrated  by  the  CLEAR 
Expert  System,  fault-isolation  expert  systems 
can  help  FOAs  monitor  the  flood  of  data.  Expert 
systems  can  accurately  monitor  hundreds  of 
real-time  telemetry  parameters,  isolate 
discrepancies  and  anomalies  the  instant  they 
can  be  detected,  and  alert  the  analysts  and 
provide  advice  on  how  to  correct  problems 
swiftly  and  effectively.  Unfortunately, 
development  of  these  systems  is  often  time 
consuming  and  costly  moreover,  they  often 
cannot  be  easily  reused  for  other  missions. 

Consequently,  GenSAA  is  being  developed  for 
use  by  the  FOAs  who  work  in  satellite  control 
centers.  GenSAA  is  designed  to  enable 
fault-isolation  expert  systems  to  be  developed 
quickly  and  easily,  and  without  the  delay  or 
costs  of  knowledge  engineers  and  programmers. 
By  facilitating  the  reuse  of  expert  system 
elements  from  mission  to  mission,  GenSAA  will 
reduce  development  costs,  preserve  expertise 
between  missions  and  during  periods  of 
personnel  turnover,  and  provide  more  effective 
spacecraft  monitoring  capabilities  on  future 
missions. 
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Communications  Systems  Division 


■he Lightweight  Com- 
puter Unit  (LCU)  family  is  the 
newest  member  of  the  Army's 
~ Tactical  Command  and  Con- 
trol Systems  (ATCCS)  Common 
Hardware  Software  (CHS) 
program.  At  the  heart  of  the 
LCU  offering  are  the  VI  and 


V2  lightweight  Computers 
(LCs)  and  Tactical  Communica- 
tions Interface  Module  (TCIM). 

The  LCU  i son  open  system, 
non-proprietary  architecture 
that  provides  a POSIX  compli- 
ant operating  system,  with  the 
capability  to  run  applications 
under  UNIX  or  MS-DOS  -.  Both 
LC  versions  will  run  off-the-shelf 
software  written  for  IBM™  PCs 
and  compatibles.  Optional 
Special  Purpose  Boards  and 
peripherals  are  available  to 
maximizeVl  andV2  LC 
interchangeability. 


VI  Lightweight  Computer  (VI  LC) 


VI  Features 

The  VI  LC  is  a commercial  25M1  Iz  486 
laptop  with  5 standard  AT  board  slots. 
Manufactured  by  Zenith  Data  Systems,  the 
VI  LC  is  equipped  with  a 120MB  internal 
hard  disk,  high  density  3.5"  floppy  drive, 
detachable  keyboard,  2.4  Kbps  modem, 
VGA  LCD,  up  to  16MB  RAM,  and  pro- 
vides over  10  MIPS  performance  with 
100%  functional  compatibility  with  its  V2 
LC  counterpart. 


Hord  Transit  Cm 


External  Hofd  Drive 


External  Tape  Backup  Unit 


External  Color  VGA  Display 


Exteifl 
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V2  Lightweight  Computer  (V2  LC)  Tactical  Communications  interface  Module  (TCIM) 


V 2 Features 

The  V2  LC  is  a rugged ized  25MHz  486 
portable  with  5 standard  AT  board  slots. 
Engineered  by  SA1C,  the  rugged  V2  LC  is 
equipped  with  a removeable  120MB  hard 
disk,  high-density  3.5"  floppy  drive,  de- 
tachable keyboard,  9.6  Kbps  modem,  VGA 
LCD,  up  to  32MB  RAM,  and  provides  over 
10  MIPS  performance  with  100%  func- 
tional downward  compatibility  to  the 

VI  LC. 


TCIM  Features 

TCIM  is  based  on  a 32/16-bit  communica- 
tion-oriented microcontroller  coupled  with 
two  high-performance  Digital  Signal 
Processors  (DSP).  Designed  by  Magnavox, 
the  TCIM  DSPs  permit  flexibility  in  per- 
forming modulation,  demodulation, 
filtering,  gain  enhancement  of  signals,  and 
the  ability  to  off-load  computationally- 
intensive,  bit-oriented  functions  from  the 
microcontroller. 


Ditk  Drive 


CD  ROM 


VI  Trackbofl 


VI  lightweight  Printer  (VI  IP) 


V2  lightweight  Printer  <V2  IP) 
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Lightweight  Depioyable  Communication  (LDC-4)  System 
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VI  LC 

Lightweight  Computer  Unit  (LCU ) Program 


The  Version  One  Lightweight  Computer 

(VI  LC)  is  a lightweight,  commercial  25MHz 
486  laptop  with  5 standard  AT  board  slots  sup- 
porting the  operational  requirements  of  the  U.S. 

Army  Tactical  Command  and  Control  System 
(ATCCS)  Common  Hardware  Software  (CHS) 
program.  Designed  by  Zenith  Data  Systems,  the 
VI  LC  is  equipped  with  a 120MB  internal  hard 
disk  drive,  high-density  3.5"  floppy  disk  drive, 
detachable  keyboard,  2400  bps  modem,  VGA 
LCD  screen,  up  to  16MB  RAM,  is  powered  from 
1 10/220  VAC  or  a two-hour  rechargeable  bat- 
tery, and  provides  over  10  MIPS  periormance  with  100%  functional  compatibility  with  its  V2  LC 

counterpart. 

The  VI  LC  is  an  open  systems,  non-proprietary  architecture  that  supports  a POSIX  compliant 
operating  system  with  the  capability  to  run  applications  under  UNIX  or  MS-DOS"  The  V I LC  will 
run  the  vast  amounts  of  commercial  off-the-shelf  software  written  for  IBM1M  PCs/PC  compatibles. 

The  commercial  V 1 LC  supports  the  external  LCU  Tactical  Communication  Interface  Module 
(TCIM).  Designed  by  Magnavox,  the  TCIM  is  based  on  a powerful  32/16-bit  communication- 
oriented  microcontroller  processor  coupled  with  two  high  performance  Digital  Signal  Processors 
(DSP).  These  DSPs  permit  flexibility  in  performing  modulation,  demodulation,  filtering,  gain 
enhancement  of  signals,  and  the  abil  ity  to  off-load  compulalionally-intensive.  bi  t-oriented  functions 
from  the  microcontroller. 

Features 

• 25MHz  80486  32-bit  processor  with  an  embedded  Floating  Point  Processor 

• Full  32-bit  data  path  to  zero-wait-state  memory 

• Internal  2400  bps  modem  with  RJ-1 1 telephone  and  data  path  connectivity 

• Detachable  82-key  subset  of  IBM  enhanced  keyboard  with  101 -key  functionality 

• Unique  operator  display  and  control  panel  for  enhanced  visual  LC  system  status 

• 640  x 480  VGA  Compatible  10"  diagonal  LCD  screen  supporting  16  Levels  of  Shading 

• Perpetual  time-of-day  / date  clock  with  integral  battery 

• Standard  AC  power,  European  AC  power  adapter,  DC  rechargeable  batteries  & cables 

• AC-DC  converter/baltery  charger  with  cable 

• 5 standard  full-length  PC/AT  card  slots  for  commercial  off-the-shelf  AT  boards 

• Common  set  of  peripherals,  connectors,  and  cables  for  the  VI  & V2  LC  platforms 

• Soft  carrying  case  to  house  the  VI  LC,  trackball,  cables  and  commercial  manuals 

• Maximum  compatibility  with  the  entire  suite  of  CHS  LCU  hardware  peripherals 
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VI  LC 

S p e c i fi  cations 


Functional 


Display: 

Expansion: 

Processor: 

Memory: 

Keyboard: 


Pointing  Device: 
Mass  Storage: 


Interface: 


Reliability: 

Maintainability: 


640  x 480  VGA  compatible,  10” 
diagonal  LCD  screen  supporting 
16  levels  of  shading 
5 full- length  PC/AT  card  slots 
25MHz  80486  with  embedded 
floating  point  processor 
4MB  RAM  standard  with 
expansion  up  to  16MB 
Detachable  82-key  subset  of  IBM 
enhanced  keyboard  with  101 -key 
functionality 
3 -button  Trackball 
3.5"  1.44MB  Floppy  Disk  Drive; 
internal  120MB  Hard  Disk  Drive 
( 19msec) 

Standard  Centronics  Parallel  Port; 
Standard  9-Pin  Serial  Port; 

Standard  VGA  Port  for  External 
Color  Monitor; 

2400  bps  Hayes  compatible  modem 
with  telephone  and  data  RJ- 1 1 jacks; 
External  Floppy  Drive  Port; 

External  TCIM  Power 
10,000  Hours  MTBF 
Predicted  MTTR  of  0.18  Hours 


Physical 

Dimensions:  Height  6.6",  Width  12.4", 

Depth  15.2" 

Weight:  22.5  lbs. 

Electrical 

Input  voltage:  1 10/220  VAC,  50/60  Hz 

Rechargeable  Battery  Pack  for  2 
hours  operation 

Optional  VI  ICU  Special  Purpose  Boards 


• MIL-STD- 1 553 

• SCSI 

• Speech  Synthesis 


• Group  3 Facsfin;’ 

• IEEE-488 

• IEEE  802.3  LAN 


Environmental 


• UL  Listed 

• Complies  with  FCC  Part  15,  Class  B 

r Best  Commercial  Operating  Environment 
Standards 


Science  Applications 
International  Cotpo  n* 

An  E mptoyee  Owned  C: ornp j , 


'7 


y 


10240  Sorrento  Valley  Road,  Suite  203 
San  Diego,  CA  92121 
1-800-772-2LCU  or  1 -800-447  4373 
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V2LC 

Lightweight  Computer  Unit  ( LCU ) Program 


The  Version  Two  Lightweight  Computer 

(V2  LC)  is  a ruggedized  25MHz  486  portable 
with  5 standard  AT  board  slots  supporting  the 
operational  requirements  of  the  U.S.  Army  Tac- 
tical Command  and  Control  System  (ATCCS) 
Common  Hardware  Software  (CHS)  program. 
Designed  by  SAIC.the  rugged  V2  LC  isequipped 
with  a removeable  1 20MB  hard  disk  drive,  high- 
density  3.5"  floppy  disk  drive,  detachable  key- 
board, 9600bps  modem.  VGA  LCD  screen,  up  to 
32MB  RAM,  is  powered  from  military  vehicles. 


1 10/220  VAC  or  a two-hour  rechargeable  bat- 
tery, and  provides  over  1 0 MIPS  performance  with  100%  functional  downward  compatibility  to  tiw 


VI  LC. 


The  V2  LC  is  an  open  systems,  non-proprietary  architecture  that  provides  a POSIX  complin;.! 
operating  system  with  the  capability  to  run  applications  under  UNIX  or  MS-DOS".  The  V2  IT  v. 
run  the  vast  amounts  of  commercial  off-the-shelf  software  written  for  IBM™  PCs/PC  compatib!  .. 


The  ruggedized  V2  LC  supports  both  an  internal  AT  size  Tactical  Communications  Interface 
Module  (TCIM)  board  (via  build-in  internal  SCSI  interface)  and  external  TCIM  configurations. 
Designed  by  Magnavox,  the  TCIM  is  based  on  a powerful  32/16-bit  communication-orb  nt  I 
microcontroller  processor  coupled  with  two  high  performance  Digital  Signal  Processors  (Dbi  ) 
These  DSPs  permit  flexibility  in  performing  modulation,  demodulation,  filtering,  gain  enhancement 
of  signals,  and  the  ability  to  off-load  computationally-intensive,  bit  oriented  functions  from  the 
microcontroller. 


Features 

• 25MHz  80486  32-bit  processor  with  an  embedded  Floating  Point  Processor 

• Full  32-bit  data  path  to  zero-wait-state  memory 

• Internal  9600  bps  modem  with  RJ-1  1 telephone  and  data  path  connectivity 

• Detachable  82-key  subset  of  IBM™  1 0 1 -key  enhanced  keyboard  with  embedded  trackba!  1 
. 640  x 480  VGA  compatible  10”  diagonal  LCD  screen  supporting  16-levels  of  shading 

• Unique  operator  display  and  control  panel  for  enhanced  visual  LC  system  status 

• Perpetual  time-of-day  / date  clock  with  integral  battery 

• Standard  AC  power,  European  AC  power  adapter,  DC  rechargeable  batteries  & cables 

• Military  vehicle  power  and  AC-DC  converter/battery  charger  with  cables 

• 5 standard  full  length  PC/AT  card  slots  for  commercial  off-the-shelf  AT  boards 

• Common  set  of  peripherals,  connectors  and  cables  for  the  V 1 & V2  LC  platforms 

• Soft  carrying  case  for  V2  LC,  cables,  adapters,  and  commercial  manuals 

• Rugged  hard  transit  case  for  V2  LC  with  soft  carrying  case,  cables,  and  accessories 

• Maximum  compatibility  with  entire  suite  of  CHS  LCU  hardware  peripherals 
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V2  LC 

Spec  if 

Functional 

Display: 

Expansion 

Processor: 

Memory 

Keyboard 

Fanning  Device: 
Mass  Storage: 

Interface 


Reliability: 

Maintainability 

Physical 

Dimensions: 

Weight 

Electrical 

Input  voltage. 


i 

/'  c a t i o n s 


r64fl  v 480  V(l\  compaiihle.  10"  - 

diagonal  LCD  screen  supporting 
1 6 levels  of  shading 
5 full  length  PC/AT  card  slots 
25MH/  80486  with  embedded 
Floating  Point  Processor 
8MB  RAM  standard  with 
expansion  up  to  32MB  RAM 
Detachable  82 -key  subset  of  IBM™ 
enhanced  keyboard  with  1 0 1 - key 
functionality 

Keyboard-embedded  3-button  Trackball 
3.5"  i ,44MB  Floppy  Disk  Drive: 
Internal  120MB  Hard  Disk  Drive 
1 1 0 msec) 

Standard  Centronics  Parallel  Port; 
Standard  9-Pin  Serial  Port; 

Standard  VGA  Port  for  External 
Color  Monitor; 

9600  bps  Hayes  compatible  modem 
with  telephone  and  data  RJ-I  I jacks; 
External  Floppy  Drive: 

Standard  SCSI  Port  (ANSI  X3.I3I- 
1986); 

External  TCIM  Po\ve» 

1 0.000  Hours  MTBF 
Predicted  MTTR  of  0.18  Hours 


Environmental  (MIL-STD-810E) 


Temperature: 

Operating  range:  - 1 3°  to  + 1 20 T 
(-25°  to  +49 'Cj 

Non  operating  range:  -25°  to  +I50CF 
(-32°  to  +65  "C) 

Temp  Shock: 

+70°  to  - I.VF  (+21°  to  -25°C)  and 
+70r  to  + 1 20 T (+21°  to  +49°C) 
in  10-minute  inters  als 

Slunk: 

30°  rotational  drop  per  MJL-STD- 
8 1 OE.  Method  516.4,  Proc  IV&VI 

\ i brat  ion: 

Track  Vehicle  operation  per  MIL- 
STD-810E.  Method  514.4.  PrtK  I 

Altitude: 

10.000  feet. 

Rainproof: 

1.8  inches  per  hour  in  20  MPH  wind 

for  30  minutes 

Humidity. 

Operating:  -10  to  95% 
Non  operating:  -5  to  95%, 

Sand1  Dust : 

20  MPH  to  ±3 MPH  for  30  minutes 

Climate: 

Fungus  resistant 

TMT 

Complies  with  FCC  Part  15.  Class  B 

Optional  V2  LCU  Special  Purpose  Boards 


Height  9.5",  Width  16.0".  Depth  10.4" 

27.5  lbs. 


1 10/220  VAC.  50/60  Hz  or  9-32  VDC 
Rechargeable  Battery  Pack  for  2 
hours  operation 


■ M1L-STD-I553  • Group  3 Facsimile 

• Counter-Timer  • IEEE-488 

• Speech  Synthesis  • IEEE  802.3  LAN 

• SCSI  (Additional  SCSI) 

• Digital  Multimeter  (DMM) 


Science  Applications 
International  Corporation 

An  Employee -Owned  Company 


10240  Sorrento  Valley  Road.  Suite  203 
San  Diego.  C A 92121 
1 800-772  2LCU  or  1 -800  447-4373 
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TCIM 

Lightweight  Computer  Unit  (LCU)  Program 


The  Tactical  Communication  Interface 
Module  (TCIM)  is  an  advanced  modem  that 
contains  appropriate  processing  and  memory 
capabilities  to  perform  as  a front-end  communi- 
cation processor  for  both  V 1 and  V2  LC  comput- 
ers. The  LCU  TCIM  provides  a powerful  com- 
munication interface  architecture  essential  to 


supporting  the  operational  communication  re- 
quirements demanded  by  the  U.S.  Army  Tactical  Command  and  Control  System  (ATCCS)  Common 
Hardware  Software  (CHS)  program.  The  TCIM  provides  two  programmable  communication 
channels,  each  configured  independently  via  software  downloads  from  the  LC  computers. 


Designed  by  Magnavox,  the  TCIM  is  based  on  a powerful  32/16-bit  communication-oriented 
microcontroller  coupled  with  two  high-performance  Digital  Signal  Processors  (DSP).  These  DSPs 
permit  flexibility  in  performing  modulation,  demodulation,  filtering,  gain  enhancement  of  signals, 
and  the  ability  to  off-load  computationally-intensive,  bit  oriented  functions  from  the  microcontroller. 
Use  of  RAM  based  software  downloaded  from  the  V1/V2  LCs  provides  not  only  channel  configu- 
ration, but  also  provides  an  easy  path  for  implementing  future  communication  capabilities. 


Features 

• Lightweight,  compact,  low  power 

• Two  Versions 

- External  Chassis  for  VI  and  V2  Lightweight  Computers 

- Internal  Circuit  Card  for  V2  Lightweight  Computer 

• High  Performance  32-Bit  Communication  Microcontroller  with  16-Bit  Data  Paths 

• State-of-the-Art  Digital  Signal  Processor  (DSP)  Technology 

• Programmable  Communication  Channels  configured  via  download  from  host  computer 

• SCSI  interface  to  host  computer  for  maximum  flexibility  across  many  host  platforms 
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TCIM 

Specifications 

Communications  Interfaces  (Programmable) 

Channel  I : • KY-68  (DSVT),  TA-  i 035  (DNVT), 

KG-84  (DLED) 

• AN/GYC-7  ULMS 

• SB-3614  Switchboard 
• EPUU JTTDS 

•4-wire:  FSK-188C;  FSK-188B; 

STAN  AG  4202  (Annex  A); 

Condition  Diphase  (CDP) 

• Protocols:  Maneuver  Control  System 
(MCS)  Circuit  Switch  protocol; 

Marine  Tactical  Systems  (MTS)  TIDP 
Mode  VII  protocol;  X.25 

Channel  I 

or  Channel  2:  • Combat  Net  Radio  (CNR):  VRC- 1 2 

and  PRC-77;  SINCGARS;  GRC-193, 
GRC-21 3,  PRC  104 

• KY-57 

• 2-wire:  FSK- 1 88C;  FSK- 1 88B; 
STANAG  4202  (Annex  A); 

Condition  Diphase  (CDP) 

• Protocol:  Maneuver  Control  System 
(MCS)  CNR  protocol;  Marine 
Tactical  Systems,  (MTS)  TIDP  CNR 
protocol;  MIL-STD  188-1 10A 

Functional 

Processor:  32/16  Bit  Microcontroller  (MC  68302); 

2-Digital  Signal  Processors  (DSP56001) 
Memory:  Microcontroller:  768KB  RAM  and 

256KB  EPROM 

Digital  Signal  Processors:  Minimum  of 
192KB  RAM  each 

Interface:  Tactical  Communications  via 

ports  J 1 , J2,  P 1 , and  P2;  V 1 and  V2 
LC  via  SCSI  (ANSI  X3.13I  -1986) 
port  J3;  SCSI  bus  extension  via  port 
J4;  Power  via  port  J5 

Reliability:  Internal  TCIM:  14,000  hours  MTBF 

External  TCIM:  1 1 ,000  hours  MTBF 
Maintainability:  Predicted  MTTR  of  0.25  hours  for 
internal  and  external  TCIM 


Environmental  (MIL-STD-810E) 


Temperature: 


Temp  Shock: 


Shock: 

Vibration : 

Altitude: 

Rainproof: 

Humidity: 

Sand/Dust: 

Climate: 

EMI: 

Physical 

Dimensions: 


Weight: 

Electrical 

Input  voltage: 


Consumption: 


Operating  range:  - 1 3°  to  + 1 20°F 
(-25°  to  +49°C) 

Non  operating  range:  -25°  to  ! 1 ■ 
(-32°  to  +65°C) 

+70°  to  -13°F  (+21°  to  -25°C) • 
+70°  to  + 1 20°F  (+2 1 ° to  +49°C;  m 
10-minute  intervals 
30°  rotational  drop  per  MIL-STi 
810E,  Method  516.4,  Proc  IV# V! 
Track  Vehicle  operation  per  Ml! 
STD-8 10E,  Method  514.4,  Proc  I 
10,000  ft. 

1.8  inches  per  hour  in  20  MPI ! wind 
for  30  minutes 
Operating:  -10  to  95%; 

Non  operating:  -5  to  95%. 

20  MPH  to  ±3MPH  for  30  m i nines 
Fungus  resistant 

Complies  with  FCC  Part  15,  Clas?  !: 


External  TCIM: 

Height  1.6”,  Width  8”,  Lengd:  :: 
Internal  TCIM: 

Standard  full-length  PC/AT  card  si:x 
External  TCIM:  3.8  lbs. 

Internal  TCIM:  0.75  lbs. 


External  TCIM;  18-36  volts  DC 
Internal  TCIM:  ±5  volts  (derived 
from  host  computer) 

External  TCIM:  15  watts  max 
Internal  TCIM:  1 2 watts  max 


Science  AppiicatU 
International  Corp . ; j ;> i i 

An  Employee-Owned  0 vC  ; ■ n 


10240  Sorrento  Valley  Road,  Suite  203 
San  Diego,  CA  92121 
1-800-772-2LCU  or  1 -800-447-4373 
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Lightweight  Deployable 
Communication  (LDC- 1 ) System 

ANIGSC-59  (V)-! 


The  Lightweight  Deployable  Communication 
System  (LDC- 1 ),  AN/GSC-59(V )-  i , developed 
by  SAIC  is  a self-contained,  Non-Development 
Item  (NDI),  stand-alone  and  networked  (LAN/ 

WAN)  communications  and  stall  C^I  automa- 
tion workstation.  The  AN/GSC-59(V)- 1 provides 
portable,  rugged  communication  and  worksta- 
tion capabilities  for  a variety  ol  military  require- 
ments. Originally  designed  tor  the  L ,S.  Special 
Operation  Command  and  Light  Forces,  the  system  s open  architecture  and  modular  design  pemm 
the  AN/GSC-59(V)-1  to  be  custom  configured  to  match  varied  mission  requirements. 

The  AN/GSC-59(V)- 1 's  rugged  construction  makes  it  ideal  for  both  sustaining  base  and  taciic.d 
operations.  At  the  heart  of  the  system  is  S AIC's  GRiDSE-T™  386  ruggedized  portable  compm  as 
the  host  CPU.  Housed  in  an  aluminum  carry  case  for  rapid  deployment,  the  system  offers  mu!o| ■ in- 
secure communication  interfaces  for  HF,  VHF and  UHF  satellite  transmission.  The  AN/GSC-59(V)- 
1 provides  enhanced  C3L  electronic  warfare,  intelligence  communications,  administration  and 
logistics  capabilities  at  all  echelons  of  command. 


Features 


Hardware 


Support  Software 


•r  NDI  & Ruggedized 

• Lightweight  & Portable 

• Sell-Contained  Transit  Case 

• Power  Sources  28V/ 1 I0V/220V 

• 32-Bit  Processor 
•Embedded  40MB  Hard  Disk 

• Internal  Diagnostics 

• Configurable  Serial  Ports 

• IBM  PC  Compatible 


• MS-DOS 
•UNIX  V 

• Windows  3.0 

• TCP/IP 

• Multiuser 

• Multitasking 


Application  Software 

• Terminal  Emulation 

• Teletype  Emulation 

• Group  3 Ea\  Emulation 

• Tactical  Fax  Emulation 

• Networking  i LAN/WAN  I 

• E-Mail 

• NITF 

•DCS  Mode  I (CAT  I & III) 

• JAMPS  Compatible 

• Message  Processing 

• Gateway  Software 

• Packet  Radio 
■ AUTODIN 

• Network  Conferencing 


Peripherals  & I/Os 

• Ethernet  (IEEE  802.31 

• SCSI  Compatible 

• Embedded  AX. 25 

•HE.  VHF.  UHF  Compatible 

• KG-84A/C,  KY-57  Inlet  be.  > 

• STU  III  Compatible 

• DDN  Interface 

• Ruggedized  Floppy  Drive(st 

• Ruggedized  Primer 

• Video  Frame  Capture 
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LDC-1 

Specif  i c a t i o n s 


System  Architecture 

AN/GSC -59(V)-I  is  an  independent,  self-contained 
workstation  with  a GRiDSE  T™  386  computer;  3.5" 
floppy  disk  drive;  printer;  AC/DC  power  supply; 
COMSEC  device  interface;  radio  handset  interface; 
trackbali/mouse;  and  networking  provisions. 


Functional 


Processor; 

Co- Processor: 

Clock: 

Memory: 

Interface: 


Test: 

Display 


Keyboard: 


80386,  3 2 -bit 

80387  - ■ 

Battery  powered 
4 MB  RAM.  ugjo  512KB 
EPROM,  40MB  Hard  Drive 
Centronics: 

GPIB; 

RS-232C  PC  Compatibles; 
Ethernet; 

SCSI  Port; 

NTSC; 

Standard  Radio  Handset; 
Trackball/Mouse 
Built-in  (on  power-up) 
Electroluminescent  (EL)  flat 
panel  640x350  pixels  with  full 
alphanumeric  and  graphics 
capabilities 
Mechanical.  59  keys 


Physical 


Dimensions:  32.2"x20.2"x  1 1.5" 

Weight:  I 15  lbs 

Chassis  and  case  Heavy  duty  aluminum 


Electrical 

Power:  1 10  VAC.  47-63  Hz;  400  Hz 

Reaidrements:  220  VAC,  47-63  Hz 

Consumption:  100  W typical,  20-30  VDC 


Communications 

AUTODIN  (DCS  Mode  I) 

Group  3 FAX  Emulation 
UXC-7A  Tactical  FAX  Emulation 
UGC-74  TTY  Emulation 
UGC-129  TTY  Emulation 
KY-57  Interface 
KG-84A/C  Interface 
STU  III  Interface 
RJ- 1 I (Telephone) 

Software  Applications 

MS-DOS 
UNIX  V 

Communications 
Word  Processing 
Spreadsheets 
Graphics 

Video  Image  Display 
User-Specified  Software 
Applications 
Project  Management 
Database 

User-Specified  Operational 
Applications 


An  Employee  Owned  Company 


SAI  Technology 

A Division  of  Science  Applications 
International  Corporation 


10240  Sorrento  Valley  Road,  Suite  203 
San  Diego,  CA  92121  1 -800-447-4373 
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SAIT-LCD86 

8 x 6 Inch  Militarized 
Liquid  Crystal  Display 


JAI  Technology  is  currently  developing 
an  8 x 6 inch  color  multifunction  display 
(MFD)  for  the  U.  S.  Army  RAH-66 
Comanche  (LH)  Helicopter.  SAIT  offers 
Mil-spec  versions  of  the  most  advanced 
Active  Matrix  Liquid  Crystal  Display  (LCD).  The  SAIT-LCD86  provides  major 
advances  over  CRT  equipment:  sunlight  readability,  thinner  profile,  lighter 
weight  and  high  reliability. 

The  SAIT-LCD86  provides  superior  performance  in  all  harsh  environments: 
aircraft,  ship,  submarine  and  ground  mobile  platforms.  A certified  MIL-Q-9858 
and  MIL-STD-2000  manufacturer,  SAI  Technology  has  the  capability  of  producing 
a family  of  militarized  LCDs,  including  2.9  x 3.4,  4x4  and  6x6  inch 
configuration. 

SAI  Technology  also  offers  LCD-controller-software  integration  capabilities 
and  complete,  logistics,  training,  and  maintenance  support. 


• Night  and  Sunlight  Readable 

• Frame  Rates  Up  to  90  Hz 

• High  Contrast  Ratios 

• Wide  Viewing  Angles 

• High  Resolution 

• Multiple  Interface  Capability 


^S^XSS  - SAI  Technology 

¥¥%»  a Division  of  Science  Applications 

An  Employee  Owned  Company  Internationa!  Corporation 

Tel.  (619)  450-3837  Fax  (619)  450-3800 


Features 

' • MIL-E-5400T,  MIL-STD-810,  and 
EMC/EM1  Qualified 

• 8 x 6 Inch  Screen  (10  Inch  Diagonal) 

• RGB 

• Up  to  256  Shades/Color 

• ANVIS  Capable 


Development  \1mlel  fur  the  RAH-hh  C timiiih  he  ( /.// 1 Hein  opter 
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SYS 

MAIN 


MAP 

HOME 


MAP 

SCL 


Ati*  t//it  cd  Avion i ( \ hisu 


Employee-owned  since  its  inception,  Science  Applications 
International  Corporation  has  annual  revenues  over  $1  billion 
and  200  offices  worldwide.  SAIC  focuses  on  the  areas  of 
national  security,  energy,  environment,  health  and  high 
technology  products. 

SAICs  success  confirms  our  belief  that  if  you  want  the  job 
done  right,  talk  to  the  owner.  Our  employee-owners 
understand  that  quality  is  not  an  option,  but  an  integral  part  of 
our  Total  Quality  Management  philosophy.  At  SAIC,  if 
you're  talking  to  one  of  our  12,000  employees,  chances  are 
you're  talking  to  an  owner. 


Specifications  subject  to  change  w ’*x>ui  notice 


SAI  Technology  Offices : 

4224  Campus  Point  Court 
San  Diego,  CA  9212  M 51 3 
Tel  (619)450-3837  Fox  (619)  450  3800 


Crystal  Plaza  One 

200 1 Jefferson  Davis  Hwy  Suite  402 

Arlington,  VA  22202 

Tel  (703)  415-3000  Fox  (703)  4 15  3007 

For  more  information  con 
1-800-447-4373  (except  CA) 
in  Europe  contact  EQUATECH  GmbH 
Tel  (352j  47  18  1 7 Fax  (352)  47  53  54 
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GRiDSE-T  7386 


Militarized  Portable 
Workstation 


Hie  GRIDSE-T/386  is  a 32  bit  80386-based  computer  designed  for  severe 
environments.  It  offers  the  power  and  memory  of  a mainframe  computer  in  a compact 
package  yet  is  lightweight,  portable  and  rugged  enough  for  tactical  military  applications. 
Thie  GRiDSE-T/386  has  one  Centronics  port,  two  RS-232C  ports,  a SCSI  port  and  a floppy 
disk  port,  making  it  compatible  with  most  hardware  peripherals.  In  addition,  the 
GRiDSE-T/386  can  run  a variety  of  off-the-shelf  software  programs  and  is  compatible  with 
the  GRiDSE-T  family  of  products  for  severe  environments. 

At  the  heart  of  the  GRiDSE-T/386  is  a 20  MHz  32  bit  microprocessor  and  80387  co- 
processor along  with  4 MB  of  system  RAM.  SAI  Technology  offers  a complete  line  of 
options  and  accessories  for  the  GRiDSE-T  line  of  militarized  portable  computers.  These 
options  include  up  to  5 12  KB  of  EPROM,  up  to  4 MB  of  non-volatile  SRAM,  28VDC  battery 
power  supply,  sunlight  readable  LCD  display  and  a DC  to  DC  power  converter. 


Features 

. UNIX®  V 

■ IBM®-AT  compatible 

■ MS-DOS®  compatible 

■ Large  electroluminescent  display 

■ Compatible  with  Mil  peripherals 


■ Floppy  interface 

■ SCSI  interface 

■ Two  asynchronous  serial  ports 

■ Centronics  parallel  interface 

■ EMI/EMC  compatibility 


SAI'  Technology 

A division  of  Science  Applications  International  Corporation 
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Specifications 

GRiDSE-T7386 

Functional 


Processor. 

80386,  32  bit 

Co-Processor: 

80387,  80  bit 

Memory: 

4MB  RAM 

up  to  512KB  EPROM 

Interfaces: 

Centronics 

Two  RS-232C  PC-compatible 
SCSI  port 
Floppy  disk  port 

Test: 

Built-in  (on  power  up) 

Reliability. 

Exceeds  10.000  hrs  MTBF  per 
MH-HDBK-217E 

Service  Life. 

10  years 

Clock. 

Battery  powered 

Environmental 

Temperature: 

Operating  -30°C  to  +55°C 
Storage  -57°C  to  +7  PC 

Altitude: 

Operating  30.000  ft 
Storage  50,000  ft 

Rainproof: 

M1I-STD-8IOD.  Method  506  2 
Procedure  I 

Humidity: 

95%  condensing 

Vibration: 

5 g's  at  5 to  2000  Hz  operating 

Shock: 

40  g’s  at  6-9  ms  operating 

Climate  Proof: 

Fungus  and  Salt  Atmosphere 

Explosion  Proof: 

Mil-STD-810D,  Method  51 1.2, 
Procedure  I 

Sand/Dust: 

M1I-STD-8IOD.  Method  510.2, 
Procedures  1 & 2,  operating 

EMI/EMC. 

M1I-STHM6IB.  Part  II,  Class  A1 

Tempest: 

Designed  to  meet  NACSIM  5I00A 

Safety: 

Mil-S7D-454H  Requirement  1 

Human  Factors: 

Mil-STD-454H  Requirement  62 

Workmanship: 

Mil-STD-454H  Requirement  9 

Physical 

Dimensions. 

16.3"  x 12.5"  x 3" 

(4 1.4  cm  x 32.8  cm  x 7.6  cm) 
9.5"  (24  cm)  high,  display  open 

Display  size: 

7.5"  x 3.7"  (19  cm  x 9.4  cm) 

Weight: 

21.5  lb  (9.8  kg) 

Chassis  and  case. 

Aluminum 

Display: 

Electroluminescent  flat  panel 
640x350  pixels  with  full 
alphanumeric  and  graphics 
capability 

Resolution. 

85  pixels  per  inch 

Brightness: 

20  FL  (mm)  per  pixel  w/o  filter 

Keyboard. 

Mechanical.  59  keys 

Electrical 

Power: 

1 10  VAC,  47-63  Hz:  400  Hz 

Requirements: 

220  VAC,  47-63  Hz 

Consumption. 

40  W typical 

6/89/1500 


Software 

Operating 

Systems:  UNIX®  V 

MS-DOS®  3.3 
MS-DOS®  4.01 

Programming  Languages: 

Ada  Target  computer.  PL/M.  C. 
Pascal,  Assembler,  Basic,  Fortran 

Options 

Sunlight  readable  LCD  display 
M MB  non-volatile  built-in  SRAM 
512  KB  Cartridge  SRAM 
Portable  Battery  pack 
DC  to  DC  power  converter 
EEPROM  capability 
Third-party  militarized  peripherals 
Consulting  and  technical  & 
engineering  support 

Request  GRiOST  options  packets  for  addition  details. 

Specifications  subject  to  change  without  notice. 

MS-DOS  is  a registered  trademark  of  ttie  Microsoft  Corporabon 

IBM  is  a registered  trademark  of  the  Internationa/  Business  Machines  Captation 

UNIX  is  a registered  trademark  of  AT&T  Corp 


SAT  Technology 

A Division  of  Science  Applications 
An  Employee-Owned  Company  International  Corporation 

4224  Campus  Pant  Court 
San  Diego.  CA  92121 - 1513 
800-447-4373  (Ex  CA) 

(619)452  9150 
Fax  (619)  450-3800 

1 700  North  Moore  St 
Suite  919 

Rossfyn.  VA  22209-1928 
703-527-9400 

For  More  Information  Call  1-800-447-4373  (Ex.  CA) 
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Mission  Critical  Technology  Development 

Nancy  Sliwa,  NASA/Ames  Research  Center 
Intelligent  Systems  Technology  Branch 


This  talk  will  cover  specific  technology  developments  in  system  reliability  modeling,  fault  tolerance 
and  fault  diagnosis.  In  addition,  it  will  present  future  mission  control  applications  of  optical 

processing. 
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Inhouse  Research  Program 
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Knowledge  Acquisition  during  Design 
Model-Building  and  Simulation 
Knowledge  Maintenance  and  Retrieval 
Symbolic  Control 
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Fund  Source:  OAET  AI  Program,  OSF  Code  MD 


Learning  and  Performance  Improvement  for  Scheduling 


> 

o 

u 

a 

E 


•r  43 
£ 

43 

O 

43  v) 
u 
a> 

S-3 

■a 
oa  a> 

C JS 
’S  v 

S 
fa- 
rt _ 

V o.  . 

« o a> 

j 

.s  » ^ 

-c  ’O  , 

Is  I 

*-p  C/3 

® s s 

v c 

rz 


C +* 

.2  >* 

C/3 

03 

Im  < 

OD  2f 
a/  C 


C 

o 


c 

o 

c 

43 

O 


4* 

u 

Cl 


a>  J 


a> 

a> 

C/3 


U 

C/3 

H 

C/3 


W 

£ 


c* 


c 

a> 

E 

a* 

o 

;> 

D 

ft 


O 

o 

H 


43 

u 

u 

«s 

a> 

C/3 

4> 


T> 

^0) 

a 

a 

< 


43 

U 

u 

03 

a> 

C/3 

a> 

BJ 


u 

• pp 

rt 

M 


WD 

C 

• Pp 
P-P 

3 

“D 

a> 

43 

u 

C/3 


<u 

e 

a> 

•pp 

C/5 


H 

C/3 

s 


00 

00 

o 


C/3 

u 

03 

a> 

I* 


I o 


E 


03 

U. 

0D 

O 

u 


Ok 


H 

W 

< 

o 


• • 

C/3 

pp 

03 

O 

O 


• • 
u 

C3 

a/ 

J 


0) 


Ip 

Ok 


• * 

C/3 

u 

o 

+*> 

03 

I* 

o 

43 

pE 

© 

U 


u 

o 


u 

o 


W 


a> 

C/3 

s 

o 

43 

8 


• • 
C 
o 


03 

N 

• Pp 

u 

© 

© 

3 

VP 

03 

43 

u 


s 

•pp 

3 

£ 

o 

Q 


• • 
© 

3 


Q 


u 

03 

C/3 


■ • 
A 

■4J 

ec 

s 

J 


• • 
© 
© 
Vp 

33 

O 

C/3 


T3 

© 


© 

© 


Ok 


0D 

8 

•pp 

X5 

e 

9 


639 


GEMPLAN  Multi-Agent  Planner 
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Goals:  Development  and  application  of  Bayesian  data 
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Efficient  Learning  Algorithms 
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ICARUS:  An  Integrated  Architecture  for  Learning 
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Goals:  Develop  an  "electronic  designer's  notebook"  capable 

of  retaining  conceptual  design  knowledge  (including 
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Fund  Source:  OAET  AI  Program,  DARPA/ISTO 


Computer-Integrated  Documentation 
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Fund  Source:  OAET  AI  Program,  SSF  AD  Program 


Some  Speculation  on  Future  Applications 
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